PT-2013-3934

CVE-2013-2791

·

Published

2013-09-09

·

Updated

2013-09-26

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions MatrikonOPC SCADA DNP3 OPC Server version 1.2.0
Description The issue allows remote attackers to cause a denial of service, resulting in a master-station daemon crash. This can be achieved by sending a malformed DNP3 TCP packet from the IP address of an outstation.
Recommendations For MatrikonOPC SCADA DNP3 OPC Server version 1.2.0, consider implementing packet validation to prevent malformed DNP3 TCP packets from causing a denial of service. As a temporary workaround, restrict access to the master-station daemon to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾