DNP3/TCP Master Detection

Binary data 7089.pasl...

CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

Code injection

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

CVE-2013-2829

The CVE-2013-2829 entry concerns MatrikonOPC SCADA DNP3 OPC Server, affected in Version 1.2.2.0 and earlier. The root cause is improper input validation (CWE-20) that may allow a remote attacker to trigger a denial-of-service condition by processing a malformed DNP3 packet, causing the server to ...

CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

Schneider Electric Telvent SAGE 3030 RTU远程拒绝服务漏洞

BUGTRAQ ID: 65262 CVECAN ID: CVE-2013-6143 Telvent SAGE 3030 RTU是工业数据通信设备。 Telvent SAGE 3030 RTU C3413-500-001D3P4、C3413-500-001F0PB处理某些输入时，DNP3服务存在错误，可导致崩溃，造成拒绝服务。 0 Schneider Electric Telvent SAGE 3030 RTU C3413-500-001F0PB Schneider Electric Telvent SAGE 3030 RTU C3413-500-001D3P4 厂商补丁：...

CVE-2013-6143

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3P4 and C3413-500-001F0PB allows remote attackers to cause a denial of service temporary outage and CPU consumption via malformed DNP3 traffic...

Code injection

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3P4 and C3413-500-001F0PB allows remote attackers to cause a denial of service temporary outage and CPU consumption via malformed DNP3 traffic...

CVE-2013-6143

CVE-2013-6143 affects Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB. The root cause is improper input validation in the DNP3 service, allowing remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3...

CVE-2013-6143

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3P4 and C3413-500-001F0PB allows remote attackers to cause a denial of service temporary outage and CPU consumption via malformed DNP3 traffic...

Electric Cybersecurity Regulations Have Serial Problem

A class of SCADA vulnerabilities discussed at a recent conference is getting attention not only for the risks they pose to master control systems at electric utilities, but also for illuminating a dangerous gap in important critical infrastructure regulations. Researchers Adam Crain and Chris...

DHS Warns of Schneider Electric ClearSCADA Vulnerability

The Department of Homeland Security is warning the maintainers of industrial control systems ICS about a remotely exploitable uncontrolled resource consumption vulnerability in Schneider Electric’s ClearSCADA software. Schneider Electric says that it has developed a new version of ClearSCADA that...

CVE-2013-6142

DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service resource consumption via IP packets containing errors that trigger event-journal messages...

Design/Logic Flaw

DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service resource consumption via IP packets containing errors that trigger event-journal messages...

CVE-2013-6142

Summary (MODE C): Schneider Electric ClearSCADA/SCADA Expert ClearSCADA 2010 R2–R3.x and 2013 R1–R1.2 are affected by CVE-2013-6142, an uncontrolled resource consumption vulnerability in the DNP3 driver (DNP3Driver.exe). Specially crafted IP frames can trigger event journal flooding, potentially ...

OSIsoft PI Interface for DNP3 Improper Input Validation

OVERVIEW Adam Crain of Automatak and Chris Sistrunk, Sr. Consultant for Mandiant, have identified an improper input validation vulnerability in the OSIsoft PI Interface for DNP3 product. OSIsoft has produced an update that mitigates this vulnerability. OSIsoft and Automatak have tested the new...

Triangle MicroWorks DNP3从源代码库远程拒绝服务漏洞

Triangle MicroWorks是一家总部设在美国的公司，Triangle MicroWorks产品是单机或第三方组件产品，使用各种传输协议与外设/从设备进行通信OPC Client, IEC 60870-6 TASE.2/ICCP Client, IEC 60870-5, DNP3, Modbus。 Triangle Research DNP3从源代码库Slave Source Code Library包含一个竞争条件缺陷，允许远程拒绝服务攻击。等待链接层应答过程中处理链接状态请求时可触发该漏洞，允许远程攻击者利用该漏洞可使链接该库的应用程序崩溃。 0 Triangle...

Triangle MicroWorks DNP3畸形数据Set/Device属性处理非法数据访问漏洞

Triangle MicroWorks是一家总部设在美国的公司，Triangle MicroWorks产品是单机或第三方组件产品，使用各种传输协议与外设/从设备进行通信OPC Client, IEC 60870-6 TASE.2/ICCP Client, IEC 60870-5, DNP3, Modbus。 Triangle Research DNP3从源代码库Slave Source Code Library处理进行数据set和device属性时存在缺陷，可导致访问非法数据访问而使链接该库的应用程序崩溃。 0 Triangle MicroWorks DNP3 Slave Source...

Triangle MicroWorks DNP3 LinIOTarg信道结构成员释放后使用漏洞

Triangle MicroWorks是一家总部设在美国的公司，Triangle MicroWorks产品是单机或第三方组件产品，使用各种传输协议与外设/从设备进行通信OPC Client, IEC 60870-6 TASE.2/ICCP Client, IEC 60870-5, DNP3, Modbus。 Triangle Research DNP3从源代码库Slave Source Code Library存在一个释放后使用错误，在信道被标记为删除后LinIOTarg访问信道结构成员可触发该漏洞，允许远程攻击者利用漏洞引用已释放内存，并执行任意代码。 0 Triangle...

CVE-2013-2821

NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attackers to cause a denial of service driver crash and process restart via a crafted DNP3 TCP packet...