CVE-2013-2811

CVE-2013-2811 describes an improper input validation in the Catapult DNP3 driver (Catapult v7.2.0.60 and earlier) and GE Proficy DNP3 I/O Driver (v7.20k and earlier), used by GE iFIX/CIMPLICITY DNP3 master stations (DNPDrv.exe). A crafted DNP3 TCP packet can trigger an unhandled exception or deni...

CVE-2013-2811

The 1 Catapult DNP3 I/O driver before 7.2.0.60 and the 2 GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe aka the DNP master station server in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service...

CVE-2013-2823

The 1 Catapult DNP3 I/O driver before 7.2.0.60 and the 2 GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe aka the DNP master station server in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a deni...

GE Proficy DNP3 Improper Input Validation

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. General Electric GE Intelligent Platforms reported to NCCIC/ICS-CERT an improper input validation vulnerability in the DNP3 driver used...

Catapult Software DNP3 Driver Improper Input Validation

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation in Catapult Software’s DN...