Lucene search

[email protected]NVD:CVE-2013-2763

HistoryApr 04, 2013 - 11:58 a.m.

CVE-2013-2763

2013-04-0411:58:49

CWE-400

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it “could not be duplicated” and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.

Affected configurations

NVD

Node

schneider-electricmodicon_m340_bmx_noc_0401_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_noc_0401Match-

Node

schneider-electricmodicon_m340_bmx_noe_0100_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_noe_0100Match-

Node

schneider-electricmodicon_m340_bmx_noe_0100h_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_noe_0100hMatch-

Node

schneider-electricmodicon_m340_bmx_noe_0110_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_noe_0110Match-

Node

schneider-electricmodicon_m340_bmx_noe_0110h_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_noe_0110hMatch-

Node

schneider-electricmodicon_m340_bmx_nor_0200h_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_nor_0200hMatch-

Node

schneider-electricmodicon_m340_bmx_p34-2010_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_p34-2010Match-

Node

schneider-electricmodicon_m340_bmx_p34-2030_firmwareMatch-

AND

schneider-electricmodicon_m340_bmx_p34-2030Match-

Node

schneider-electricmodicon_m340_bmxp341000_firmwareMatch-

AND

schneider-electricmodicon_m340_bmxp341000Match-

Node

schneider-electricmodicon_m340_bmxp342010_firmwareMatch-

AND

schneider-electricmodicon_m340_bmxp342010Match-

Node

schneider-electricmodicon_m340_bmxp342020_firmwareMatch-

AND

schneider-electricmodicon_m340_bmxp342020Match-

Node

schneider-electricmodicon_m340_bmxp342030_firmwareMatch-

AND

schneider-electricmodicon_m340_bmxp342030Match-

References

ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

Related for NVD:CVE-2013-2763

cve1 nessus2 prion1 cvelist1