CVE-2013-2793: Buffer Overflow
First published: Mon Sep 09 2013(Updated: )
Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Triangle Microworks .NET Communication Protocol Components | =3.06.0.171 | |
| Triangle Microworks .NET Communication Protocol Components | =3.15.0.369 | |
| Trianglemicroworks Ansi C Source Code Libraries | =3.06.0000 | |
| Trianglemicroworks Ansi C Source Code Libraries | =3.15.0000 | |
| Triangle MicroWorks SCADA Data Gateway | =2.50 | |
| Triangle MicroWorks SCADA Data Gateway | =2.50.0309 | |
| Triangle MicroWorks SCADA Data Gateway | =3.00.0616 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-2793?
CVE-2013-2793 is classified as a denial of service vulnerability.
How do I fix CVE-2013-2793?
To fix CVE-2013-2793, update Triangle MicroWorks SCADA Data Gateway, DNP3 .NET Protocol components, and DNP3 C libraries to their latest versions.
What types of systems are affected by CVE-2013-2793?
CVE-2013-2793 affects Triangle MicroWorks SCADA Data Gateway and various DNP3 protocol components and libraries.
What is the impact of exploiting CVE-2013-2793?
Exploiting CVE-2013-2793 can cause an infinite loop leading to denial of service.
What versions are vulnerable to CVE-2013-2793?
Versions from Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616 and specific DNP3 protocol components are vulnerable to CVE-2013-2793.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/trianglemicroworks
- canonical/triangle microworks .net communication protocol components
- version/triangle microworks .net communication protocol components/3.06.0.171
- version/triangle microworks .net communication protocol components/3.15.0.369
- canonical/trianglemicroworks ansi c source code libraries
- version/trianglemicroworks ansi c source code libraries/3.06.0000
- version/trianglemicroworks ansi c source code libraries/3.15.0000
- canonical/triangle microworks scada data gateway
- version/triangle microworks scada data gateway/2.50
- version/triangle microworks scada data gateway/2.50.0309
- version/triangle microworks scada data gateway/3.00.0616