EUVD-2013-2757

Malware in sbrugna...

EUVD-2013-2726

Malware in sbrugna...

CVE-2013-2787

Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets...

CVE-2013-2818

The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service infinite loop and DNP3 service disruption via crafted input over a serial line...

Design/Logic Flaw

The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service infinite loop and DNP3 service disruption via crafted input over a serial line...

CVE-2013-2818

The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service infinite loop and DNP3 service disruption via crafted input over a serial line...

CVE-2013-2818

CVE-2013-2818 affects Alstom e-terra control software, specifically the DNP Master Driver in versions 3.5, 3.6 and 3.7. The root cause is improper input validation in the DNP3 Master component, which can cause the software to enter an infinite loop and disrupt DNP3 services. The IP-connected vari...

CVE-2013-2787

Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets...

Code injection

Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets...

CVE-2013-2787

CVE-2013-2787 affects Alstom e-terra control software (versions 3.5–3.7). The issue is an improper input validation in the DNP Master Driver that can cause an infinite loop/crash . IP-based devices are vulnerable to remote exploitation via specially crafted TCP packets; serial connections require...

CVE-2013-2787

Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets...

Alstom e-Terracontrol DNP3 Master Improper Input Validation (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-13-282-01, Alstom e‑terra control DNP3 Master Improper Input Validation, which was posted to the NCCIC/ICS‑CERT Web site October 09, 2013. Adam Crain of Automatak and independent researcher Chris Sistrunk have...