CVE-2013-2823
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
- Score
- CVSS 2.0 4.7 Medium
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2013-11-22
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
- Catapult Dnp3 I/o Driver (Catapultsoftware)
- Intelligent Platforms Proficy Dnp3 I/o Driver (Ge)
- Intelligent Platforms Proficy Hmi/scada Cimplicity (Ge)
- Intelligent Platforms Proficy Hmi/scada Ifix (Ge)
References
- http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01
- http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805
- http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Secur…
