CVE-2013-2794: Buffer Overflow

Published Sep 9, 2013
·
Updated

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.

Affected Software

73 affected components
Trianglemicroworks Ansi C Source Code Libraries=3.06.0000
Trianglemicroworks Ansi C Source Code Libraries=3.07.0000
Trianglemicroworks Ansi C Source Code Libraries=3.08.0000
Trianglemicroworks Ansi C Source Code Libraries=3.09.0000
Trianglemicroworks Ansi C Source Code Libraries=3.10.0000
Trianglemicroworks Ansi C Source Code Libraries=3.11.0000
Trianglemicroworks Ansi C Source Code Libraries=3.12.0000
Trianglemicroworks Ansi C Source Code Libraries=3.13.0000
Trianglemicroworks Ansi C Source Code Libraries=3.14.0000
Trianglemicroworks Ansi C Source Code Libraries=3.15.0000
Trianglemicroworks .net Communication Protocol Components=3.06.0.171
Trianglemicroworks .net Communication Protocol Components=3.07.00
Trianglemicroworks .net Communication Protocol Components=3.08.00
Trianglemicroworks .net Communication Protocol Components=3.09.00
Trianglemicroworks .net Communication Protocol Components=3.10.00
Trianglemicroworks .net Communication Protocol Components=3.11.00
Trianglemicroworks .net Communication Protocol Components=3.14.00
Trianglemicroworks .net Communication Protocol Components=3.15.00
Trianglemicroworks .net Communication Protocol Components=3.15.0.369
Trianglemicroworks Scada Data Gateway=2.50
Trianglemicroworks Scada Data Gateway=2.50.0309
Trianglemicroworks Scada Data Gateway=2.51
Trianglemicroworks Scada Data Gateway=2.53
Trianglemicroworks Scada Data Gateway=2.54.0515
Trianglemicroworks Scada Data Gateway=2.54.0516
Trianglemicroworks Scada Data Gateway=2.54.0517
Trianglemicroworks Scada Data Gateway=2.54.0518
Trianglemicroworks Scada Data Gateway=2.54.0528
Trianglemicroworks Scada Data Gateway=2.54.0529
Trianglemicroworks Scada Data Gateway=2.54.0536
Trianglemicroworks Scada Data Gateway=2.54.0540
Trianglemicroworks Scada Data Gateway=2.54.0544
Trianglemicroworks Scada Data Gateway=2.54.0545
Trianglemicroworks Scada Data Gateway=2.54.0552
Trianglemicroworks Scada Data Gateway=2.54.0553
Trianglemicroworks Scada Data Gateway=2.54.0558
Trianglemicroworks Scada Data Gateway=2.54.0561
Trianglemicroworks Scada Data Gateway=2.54.0562
Trianglemicroworks Scada Data Gateway=2.54.0564
Trianglemicroworks Scada Data Gateway=2.54.0565
Trianglemicroworks Scada Data Gateway=2.54.0566
Trianglemicroworks Scada Data Gateway=2.54.0567
Trianglemicroworks Scada Data Gateway=2.54.0569
Trianglemicroworks Scada Data Gateway=2.54.0570
Trianglemicroworks Scada Data Gateway=2.54.0571
Trianglemicroworks Scada Data Gateway=2.54.0572
Trianglemicroworks Scada Data Gateway=2.54.0573
Trianglemicroworks Scada Data Gateway=2.54.0574
Trianglemicroworks Scada Data Gateway=2.54.0575
Trianglemicroworks Scada Data Gateway=2.54.0576
Trianglemicroworks Scada Data Gateway=2.54.0577
Trianglemicroworks Scada Data Gateway=2.54.0578
Trianglemicroworks Scada Data Gateway=2.54.0579
Trianglemicroworks Scada Data Gateway=2.54.0580
Trianglemicroworks Scada Data Gateway=2.54.0581
Trianglemicroworks Scada Data Gateway=2.54.0582
Trianglemicroworks Scada Data Gateway=2.54.0583
Trianglemicroworks Scada Data Gateway=2.54.0584
Trianglemicroworks Scada Data Gateway=2.54.0586
Trianglemicroworks Scada Data Gateway=2.54.0587
Trianglemicroworks Scada Data Gateway=2.54.0588
Trianglemicroworks Scada Data Gateway=2.54.0589
Trianglemicroworks Scada Data Gateway=2.54.0590
Trianglemicroworks Scada Data Gateway=2.54.0591
Trianglemicroworks Scada Data Gateway=2.54.0592
Trianglemicroworks Scada Data Gateway=2.54.0594
Trianglemicroworks Scada Data Gateway=2.54.0595
Trianglemicroworks Scada Data Gateway=2.54.0596
Trianglemicroworks Scada Data Gateway=2.54.0597
Trianglemicroworks Scada Data Gateway=2.54.0598
Trianglemicroworks Scada Data Gateway=2.54.0599
Trianglemicroworks Scada Data Gateway=3.00
Trianglemicroworks Scada Data Gateway=3.00.0616

Event History

Sep 9, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-2794?

CVE-2013-2794 has been classified as a denial-of-service vulnerability that can be exploited by physically proximate attackers.

2

How do I fix CVE-2013-2794?

To mitigate CVE-2013-2794, you should update your Triangle MicroWorks SCADA Data Gateway or related DNP3 components to a fixed version as provided in the vendor's release notes.

3

Who is affected by CVE-2013-2794?

CVE-2013-2794 affects users of Triangle MicroWorks SCADA Data Gateway versions 2.50.0309 through 3.00.0616 and DNP3 .NET Protocol components in specified versions.

4

What types of attacks can exploit CVE-2013-2794?

Exploitation of CVE-2013-2794 could lead to a denial of service resulting in an infinite loop condition on affected systems.

5

Is there a workaround for CVE-2013-2794?

Currently, the recommended solution for CVE-2013-2794 is to apply software updates, as no specific workarounds have been documented.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203