Design/Logic Flaw

2022-01-2820:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

38.4%

JSON

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E and 357E RTUs with firmware V8.18.1 and prior

CPENameOperatorVersion
scadapack_312e_firmwarelt8.19.1
scadapack_313e_firmwarelt8.19.1
scadapack_314e_firmwarelt8.19.1
scadapack_330e_firmwarelt8.19.1
scadapack_333e_firmwarelt8.19.1
scadapack_334e_firmwarelt8.19.1
scadapack_337e_firmwarelt8.19.1
scadapack_350e_firmwarelt8.19.1
scadapack_357e_firmwarelt8.19.1

Name	Operator	Version
scadapack_312e_firmware	lt	8.19.1
scadapack_313e_firmware	lt	8.19.1
scadapack_314e_firmware	lt	8.19.1
scadapack_330e_firmware	lt	8.19.1
scadapack_333e_firmware	lt	8.19.1
scadapack_334e_firmware	lt	8.19.1
scadapack_337e_firmware	lt	8.19.1
scadapack_350e_firmware	lt	8.19.1
scadapack_357e_firmware	lt	8.19.1

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-01

0.001 Low

EPSS

Percentile

38.4%

JSON

Related for PRION:CVE-2021-22816