CVE-2013-5741

2022-10-0316:14:56

CWE-20

[email protected]

web.nvd.nist.gov

triangle research

nano-10

plc

firmware

denial of service

modbus

remote attack

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.4%

JSON

Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service (transition to the interrupt state) via a crafted packet to TCP port 502.

Affected configurations

NVD

Node

triplcnano-10_plc_firmwareRange≤r81

triplcnano-10_plc_firmwareMatchr80

AND

triplcnano-10_plcMatch-

CPENameOperatorVersion
triplc:nano-10_plc_firmwaretriplc nano-10 plc firmwareler81
triplc:nano-10_plc_firmwaretriplc nano-10 plc firmwareeqr80
triplc:nano-10_plctriplc nano-10 plceq-

CPE	Name	Operator	Version
triplc:nano-10_plc_firmware	triplc nano-10 plc firmware	le	r81
triplc:nano-10_plc_firmware	triplc nano-10 plc firmware	eq	r80
triplc:nano-10_plc	triplc nano-10 plc	eq	-