CVE-2013-0681: Input Validation
First published: Fri Apr 05 2013(Updated: )
Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed data in a formatted text command.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cogent Datahub | <=7.2.2 | |
| Cogent Datahub | =7.0 | |
| Cogent Datahub | =7.0.2 | |
| Cogent Datahub | =7.1.0 | |
| Cogent Datahub | =7.1.1 | |
| Cogent Datahub | =7.1.1.63 | |
| Cogent Datahub | =7.1.2 | |
| Cogent Datahub | <=6.4.21 | |
| Cogent Datahub | =6.4.20 | |
| Cogent Datahub | <=6.4.21 | |
| Cogent Datahub | =6.4.20 | |
| Microsoft Windows Operating System | ||
| Cogent Datahub | <=7.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-0681?
CVE-2013-0681 has been classified as a medium severity vulnerability due to its potential to cause a denial of service.
How does CVE-2013-0681 affect affected versions of Cogent DataHub?
CVE-2013-0681 allows remote attackers to crash the application by sending malformed data, leading to a NULL pointer dereference.
What versions of Cogent DataHub are affected by CVE-2013-0681?
Affected versions include Cogent DataHub before 7.3.0 and OPC DataHub before 6.4.22.
How can I mitigate the risks associated with CVE-2013-0681?
To mitigate CVE-2013-0681, users should update to the latest patched versions of Cogent DataHub software.
Is there a known exploit for CVE-2013-0681?
Yes, there are known exploits that utilize malformed data to trigger the denial of service condition described in CVE-2013-0681.
- agent/weakness
- agent/type
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cogentdatahub
- canonical/cogent datahub
- version/cogent datahub/7.2.2
- version/cogent datahub/7.0
- version/cogent datahub/7.0.2
- version/cogent datahub/7.1.0
- version/cogent datahub/7.1.1
- version/cogent datahub/7.1.1.63
- version/cogent datahub/7.1.2
- version/cogent datahub/6.4.21
- version/cogent datahub/6.4.20
- vendor/microsoft
- canonical/microsoft windows operating system