399 matches found
GE Proficy DNP3 Improper Input Validation
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. General Electric GE Intelligent Platforms reported to NCCIC/ICS-CERT an improper input validation vulnerability in the DNP3 driver used...
Catapult Software DNP3 Driver Improper Input Validation
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation in Catapult Software’s DN...
Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-13-282-01, Alstom e‑terra control DNP3 Master Improper Input Validation, which was posted to the NCCIC/ICS‑CERT Web site October 09, 2013. Adam Crain of Automatak and independent researcher Chris Sistrunk have...
CVE-2013-2783
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...
Design/Logic Flaw
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...
CVE-2013-2783
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...
CVE-2013-2783
CVE-2013-2783 involves IOServer’s DNP3 driver (drivers 1.0.19.0). Affected component: TCP port 20000 input handling. Root cause: improper input validation can trigger an infinite loop, allowing remote attackers to cause a denial of service and potentially obtain unspecified control. Impact: remot...
SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation in the SUBNET Solutions Inc. SubSTATION Server software application. SUBNET Solutions Inc. has produced a new version that mitigates this vulnerability. SUBNET Solutions Inc. ha...
Triangle MicroWorks Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in multiple Triangle MicroWorks’ products and third‑party components. Triangle MicroWorks has produced an update that mitigates this vulnerability. Adam Crain has...
Schweitzer Engineering Laboratories Improper Input Validation
Overview Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper DNP3 input validation in Schweitzer Engineering Laboratories’ real-time automation controllers RTAC. Schweitzer Engineering Laboratories SEL has produced updated firmware that mitigates this...
MatrikonOPC SCADA DNP3 Master Station Improper Input Validation
OVERVIEW This updated advisory was originally posted to the US-CERT secure Portal library on August 02, 2013, and is now being released to the ICS-CERT Web page. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in...
IOServer Master Station Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the IOServer DNP3 Driver on the master station. IOServer has produced a new version that mitigates this vulnerability. The researchers have tested the new versi...
IOServer DNP3 Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper input validation in IOServer’s DNP3 driver software. IOServer has produced an updated software version that mitigates this vulnerability. Adam Crain and Chris Sistrunk updated and tested this versi...
SCADA DNP3 auth error function code
...
SCADA DNP3 auth request function code
...
Non-DNP3 Traffic over DNP3 Port
...
DNP3 Non-Compliant requests
...
SCADA DNP3 read function code
...