382 matches found
Code injection
Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet...
CVE-2013-2792
CVE-2013-2792 affects Schweitzer Engineering Laboratories SEL-2241, SEL-3505, and SEL-3530 RTAC master devices. It arises from improper input validation of DNP3 over TCP, allowing remote attackers to cause an infinite loop and denial of service. Public references in NVD/NIST report a base score o...
CVE-2013-2792
Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet...
GE Proficy DNP3 Improper Input Validation
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. General Electric GE Intelligent Platforms reported to NCCIC/ICS-CERT an improper input validation vulnerability in the DNP3 driver used...
Catapult Software DNP3 Driver Improper Input Validation
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation in Catapult Software’s DN...
Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-13-282-01, Alstom e‑terra control DNP3 Master Improper Input Validation, which was posted to the NCCIC/ICS‑CERT Web site October 09, 2013. Adam Crain of Automatak and independent researcher Chris Sistrunk have...
CVE-2013-2783
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...
Design/Logic Flaw
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...
CVE-2013-2783
CVE-2013-2783 involves IOServer’s DNP3 driver (drivers 1.0.19.0). Affected component: TCP port 20000 input handling. Root cause: improper input validation can trigger an infinite loop, allowing remote attackers to cause a denial of service and potentially obtain unspecified control. Impact: remot...
CVE-2013-2783
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...
SUBNET Solutions Inc. SubSTATION Server DNP3 Outstation Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation in the SUBNET Solutions Inc. SubSTATION Server software application. SUBNET Solutions Inc. has produced a new version that mitigates this vulnerability. SUBNET Solutions Inc. ha...
Triangle MicroWorks Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in multiple Triangle MicroWorks’ products and third‑party components. Triangle MicroWorks has produced an update that mitigates this vulnerability. Adam Crain has...
Schweitzer Engineering Laboratories Improper Input Validation
Overview Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper DNP3 input validation in Schweitzer Engineering Laboratories’ real-time automation controllers RTAC. Schweitzer Engineering Laboratories SEL has produced updated firmware that mitigates this...
MatrikonOPC SCADA DNP3 Master Station Improper Input Validation
OVERVIEW This updated advisory was originally posted to the US-CERT secure Portal library on August 02, 2013, and is now being released to the ICS-CERT Web page. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in...
IOServer Master Station Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the IOServer DNP3 Driver on the master station. IOServer has produced a new version that mitigates this vulnerability. The researchers have tested the new versi...
IOServer DNP3 Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper input validation in IOServer’s DNP3 driver software. IOServer has produced an updated software version that mitigates this vulnerability. Adam Crain and Chris Sistrunk updated and tested this versi...
SCADA DNP3 freeze no ack function code
...
SCADA DNP3 confirm function code
...