CVE-2013-2818

Name of the Vulnerable Software and Affected Versions Alstom e-terracontrol versions 3.5 through 3.7

Description The issue allows physically proximate attackers to cause a denial of service, resulting in an infinite loop and disruption of the DNP3 service, via crafted input over a serial line.

Recommendations For versions 3.5 through 3.7, consider restricting access to the serial line to minimize the risk of exploitation. As a temporary workaround, limit the input over the serial line to prevent crafted input from causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this issue.