CVE-2013-2823: Input Validation
First published: Fri Nov 22 2013(Updated: )
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Catapultsoftware Catapult Dnp3 I\/o Driver | <=7.20.56 | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | <=7.20 | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20 | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-a | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-b | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-c | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-d | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-e | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-f | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-g | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-h | |
| Ge Intelligent Platforms Proficy Dnp3 I\/o Driver | =7.20-i | |
| Ge Intelligent Platforms Proficy Hmi\/scada Cimplicity | =4.01 | |
| Ge Intelligent Platforms Proficy Hmi\/scada Cimplicity | =7.5 | |
| Ge Intelligent Platforms Proficy Hmi\/scada Cimplicity | =8.0 | |
| Ge Intelligent Platforms Proficy Hmi\/scada Cimplicity | =8.1 | |
| Ge Intelligent Platforms Proficy Hmi\/scada Cimplicity | =8.2 | |
| Ge Intelligent Platforms Proficy Hmi\/scada Ifix | =5.0 | |
| Ge Intelligent Platforms Proficy Hmi\/scada Ifix | =5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01
- http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805
- http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdf
- collector/nvd-index
- vendor/catapultsoftware
- product/catapult dnp3 i\/o driver
- canonical/catapultsoftware catapult dnp3 i\/o driver
- vendor/ge
- product/intelligent platforms proficy dnp3 i\/o driver
- canonical/ge intelligent platforms proficy dnp3 i\/o driver
- product/intelligent platforms proficy hmi\/scada cimplicity
- canonical/ge intelligent platforms proficy hmi\/scada cimplicity
- product/intelligent platforms proficy hmi\/scada ifix
- canonical/ge intelligent platforms proficy hmi\/scada ifix