MatrikonOPC Improper Input Validation

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on January 10, 2014, and is now being released to the NCCIC/ICS-CERT web site. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the...

PT-2014-2640

Name of the Vulnerable Software and Affected Versions MatrikonOPC SCADA DNP3 OPC Server versions 1.2.2.0 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a malformed DNP3 packet. Recommendations For versions 1.2.2.0...

CVE-2013-2829: Improper Input Validation

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

PT-2013-3934

Name of the Vulnerable Software and Affected Versions MatrikonOPC SCADA DNP3 OPC Server version 1.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a master-station daemon crash. This can be achieved by sending a malformed DNP3 TCP packet from the IP...

CVE-2013-2791: Improper Restriction of Operations within the Bounds of a Memory Buffer

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

MatrikonOPC SCADA DNP3 Master Station Improper Input Validation

OVERVIEW This updated advisory was originally posted to the US-CERT secure Portal library on August 02, 2013, and is now being released to the ICS-CERT Web page. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in...