- 5.4MediumCVSS base score
- 1.1%Exploitation in 30 daysEPSS · top 34% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio transmissions that spoof GPS satellite broadcasts.
Timeline
ID reserved
By icscert
- 46 days later
· 46 days later
Published
- 11 years later
· 11 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | Medium5.4 | AV:N/AC:H/Au:N/C:N/I:N/A:C |
| NVDNVD · Modified | 2.0 | High7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
- EPSS (exploitation in 30 days)
- 1.1% · top 34% of all CVEs (9 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.4.
Affected products
Arbiter Systems · Model 1094B GPS Substation Clock
- affected all versions
What to do
Workaround: Arbiter Systems would like to stress that they have not heard of this vulnerability being exploited in an actual control system. They have created a new product line, the 1200 series, which is not vulnerable to this type of attack. Arbiter Systems plans to continue to sell the 1094B model clock, because it is difficult to spoof the GPS signal and not likely to happen. In the unlikely event that the 1094B has been compromised, it can be recovered by removing and replacing the internal receiver battery. Arbiter Systems plans to investigate the feasibility of changing this model to protect against this type of exploit. Please contact Arbiter Systems Technical Support for additional questions: Phone: 1-800-321-3831 or 1-805-237-3831 Email: http://www.arbiter.com/contact/index.php
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2014-9019 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2014-9194)Record last updated .