CVE-2013-6143

2014-01-3116:55:05

CWE-399

CWE-20

[email protected]

web.nvd.nist.gov

schneider electric

telvent

sage 3030 rtu

firmware

denial of service

dnp3

nvd

cve-2013-6143

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.1%

JSON

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3 traffic.

Affected configurations

NVD

Node

schneider-electrictelvent_sage_3030_firmwareMatchc3413-500-001d3_p4

schneider-electrictelvent_sage_3030_firmwareMatchc3413-500-001f0_pb

CPENameOperatorVersion
schneider-electric:telvent_sage_3030_firmwareschneider-electric telvent sage 3030 firmwareeqc3413-500-001d3_p4
schneider-electric:telvent_sage_3030_firmwareschneider-electric telvent sage 3030 firmwareeqc3413-500-001f0_pb

CPE	Name	Operator	Version
schneider-electric:telvent_sage_3030_firmware	schneider-electric telvent sage 3030 firmware	eq	c3413-500-001d3_p4
schneider-electric:telvent_sage_3030_firmware	schneider-electric telvent sage 3030 firmware	eq	c3413-500-001f0_pb