Lucene search

[email protected]CVE-2013-2811

HistoryNov 22, 2013 - 1:55 a.m.

CVE-2013-2811

2013-11-2201:55:03

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-2811

catapult dnp3 i/o driver

ge intelligent platforms proficy

dnp3 tcp

nvd

denial of service

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.

Affected configurations

NVD

Node

catapultsoftwarecatapult_dnp3_i\/o_driverRange≤7.20.56

geintelligent_platforms_proficy_dnp3_i\/o_driverRange≤7.20j

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20-

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20a

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20b

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20c

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20d

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20e

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20f

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20g

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20h

geintelligent_platforms_proficy_dnp3_i\/o_driverMatch7.20i

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch4.01

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch7.5

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.0

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.1

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.2

geintelligent_platforms_proficy_hmi\/scada_ifixMatch5.0

geintelligent_platforms_proficy_hmi\/scada_ifixMatch5.1

CPENameOperatorVersion
catapultsoftware:catapult_dnp3_i\/o_drivercatapultsoftware catapult dnp3 i/o driverle7.20.56
ge:intelligent_platforms_proficy_dnp3_i\/o_driverge intelligent platforms proficy dnp3 i/o driverle7.20
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq7.5
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.1
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.2
ge:intelligent_platforms_proficy_hmi\/scada_ifixge intelligent platforms proficy hmi/scada ifixeq5.0
ge:intelligent_platforms_proficy_hmi\/scada_ifixge intelligent platforms proficy hmi/scada ifixeq5.1

CPE	Name	Operator	Version
catapultsoftware:catapult_dnp3_i\/o_driver	catapultsoftware catapult dnp3 i/o driver	le	7.20.56
ge:intelligent_platforms_proficy_dnp3_i\/o_driver	ge intelligent platforms proficy dnp3 i/o driver	le	7.20
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	7.5
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.1
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.2
ge:intelligent_platforms_proficy_hmi\/scada_ifix	ge intelligent platforms proficy hmi/scada ifix	eq	5.0
ge:intelligent_platforms_proficy_hmi\/scada_ifix	ge intelligent platforms proficy hmi/scada ifix	eq	5.1

References

ics-cert.us-cert.gov/advisories/ICSA-13-297-01

ics-cert.us-cert.gov/advisories/ICSA-13-297-02

support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805

support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdf