399 matches found
Design/Logic Flaw
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service infinite loop or process crash via crafted input over a serial line...
CVE-2014-0762 CG Automation ePAQ-9410 Substation Gateway Improper Input Validation
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...
CVE-2014-0761
The CVE-2014-0761 vulnerability affects CG Automation’s ePAQ-9410 Substation Gateway DNP3 driver. The issue is improper input validation in the DNP3 driver, where a crafted TCP packet can cause an infinite loop or process crash, leading to a denial of service. Affects all versions of the ePAQ-941...
CVE-2014-0761 CG Automation ePAQ-9410 Substation Gateway Improper Input Validation
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...
CVE-2014-0762
The CVE-2014-0762 issue affects the CG Automation DNP3 driver used in the ePAQ-9410 Substation Gateway. The root cause is improper input validation that can cause an infinite loop, crashing the process and requiring a manual restart, affecting availability. The IP-based path could be exploited re...
Elipse SCADA DNP3 Denial of Service
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 30, 2014, and is being released to the NCCIC/ICS-CERT web site Independent researchers Adam Crain and Chris Sistrunk have identified a DNP3 denial‑of‑service vulnerability in the Elipse SCADA application...
IOServer Resource Exhaustion Vulnerability
OVERVIEW Chris Sistrunk of Mandiant and Adam Crain of Automatak have identified an out of bound read vulnerability in the IOServer application. IOServer has produced a new version that mitigates this vulnerability. Adam Crain has tested the new version to validate that it resolves the...
GE Proficy HMI/SCADA DNP3 Driver Input Validation
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 14, 2014, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Adam Crain of Automatak has identified an improper input validation in the DNP3 driver provided by Catapult Software...
Wireshark < 0.99.5 DNP3 Dissector Infinite Loop Exploit
No description provided by source. !/usr/bin/perl Automatically generated by beSTORMtm Copyright Beyond Security c 2003-2007 $Revision: 3741 $ Attack vector: M0:P0:B0.BT0:B0.BT0:B0.BT0:B0.BT0 Module: DNP3 use strict; use warnings; use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host =...
Rockwell Micrologix 1400 DNP3 DOS Vulnerability
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on September 11, 2014, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Matthew Luallen of CYBATI has identified a denial-of-service DoS vulnerability to the DNP3 implementation of the...
CVE-2014-2346
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...
CVE-2014-2345
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...
Design/Logic Flaw
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...
Design/Logic Flaw
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...
CVE-2014-2345 COPA-DATA zenon DNP3 Improper Input Validation
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service infinite loop and process crash by sending a crafted DNP3 packet over TCP...
CVE-2014-2346 COPA-DATA zenon DNP3 Improper Input Validation
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...
CVE-2014-2346
The CVE-2014-2346 issue affects COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation). Affected versions are zenon DNP3 NG driver (7.10 SP0 up to 7.11 SP0 build 10238) and zenon DNP3 Process Gateway (7.11 SP0 build 10238 and prior). The root cause is improp...
CVE-2014-2345
Summary of CVE-2014-2345 : COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation) have an improper input validation flaw that allows remote attackers to trigger a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP. ...
COPA-DATA Patches DNP3 SCADA Vulnerability
A vulnerability exists in a particular brand of SCADA software that if left unpatched, could trigger a denial of service condition and go on to compromise the software’s communication connections, resulting in system instability. The problem is an improper input validation vulnerability and exist...