Code injection

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service excessive data processing via a crafted DNP3 packet...

CVE-2014-2342 Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service excessive data processing via a crafted DNP3 packet...

CVE-2014-2342

Triangle MicroWorks SCADA Data Gateway vulnerable to DoS via crafted DNP3 packets. Affected: versions before 3.00.0635. Root cause: incorrect input validation leading to uncontrolled resource consumption (IP-connected DoS; serial connections also impacted with physical access). Impact: denial of ...

CG Automation Improper Input Validation

OVERVIEW Researchers Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified an improper input validation vulnerability in the CG Automation ePAQ-9410 Substation Gateway DNP3 protocol components. CG Automation has produced an updated software that mitigates this vulnerability. CG...

CVE-2013-2828

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

Design/Logic Flaw

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

CVE-2013-2809

CVE-2013-2809 concerns the DNP Master Driver in OSIsoft PI Interface for DNP3 (prior to version 3.1.2.54). The root cause is improper input validation in the DNP3 IP path, allowing remote attackers to cause an interface shutdown/DoS by sending a crafted TCP packet. The vulnerability affects IP-co...

CVE-2013-2828

The CVE applies to the OSIsoft PI Interface for DNP3, specifically the DNP Master Driver in the OSIsoft PI Interface, version prior to 3.1.2.54. The root cause is improper input handling/validation that can cause the PI Interface for DNP3 to shut down. Two attack surfaces are described: (1) IP-co...

CVE-2013-2828

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

CVE-2013-2809

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

COPA-DATA Improper Input Validation

OVERVIEW Automation software company Ing. Punzenberger COPA-DATA GmbH reported an improper input validation vulnerability affecting the DNP3 driver in the zenon SCADA software. The vulnerability was found based on the DNP3 research conducted by Adam Crain of Automatak and Chris Sistrunk of...

DNP3/TCP 'Cold Restart' Function Code Detection

Binary data 7094.pasl...

DNP3/TCP 'Warm Restart' Function Code Detection

Binary data 7095.pasl...

DNP3/TCP 'Disable Unsolicited Messages' Function Code Detection

Binary data 7097.pasl...

DNP3/TCP 'Stop Application' Function Code Detection

Binary data 7096.pasl...

DNP3/TCP Master Detection

Binary data 7089.pasl...

DNP3/TCP Outstation Detection

Binary data 7090.pasl...

CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

Code injection

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

CVE-2013-2829

The CVE-2013-2829 entry concerns MatrikonOPC SCADA DNP3 OPC Server, affected in Version 1.2.2.0 and earlier. The root cause is improper input validation (CWE-20) that may allow a remote attacker to trigger a denial-of-service condition by processing a malformed DNP3 packet, causing the server to ...