Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability

🗓️ 09 Oct 2014 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 24 Views

Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability affecting Schneider Electric versions prior to December 1, 2013, and specific Telvent SAGE 3030 models. Exploitation allows remote attackers to affect DNP3 master-slave communication, inducing denial-of-service

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2013-6143	31 Jan 201416:00	–	cve
Cvelist	CVE-2013-6143	31 Jan 201416:00	–	cvelist
EUVD	EUVD-2013-5972	7 Oct 202500:30	–	euvd
NVD	CVE-2013-6143	31 Jan 201416:55	–	nvd
Prion	Code injection	31 Jan 201416:55	–	prion
seebug.org	Schneider Electric Telvent SAGE 3030 RTU远程拒绝服务漏洞	12 Feb 201400:00	–	seebug

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2014/icsa-14-006-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-14-006-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

09 Oct 2014 06:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

EPSS0.00455