CVE-2013-6142: Medium severity AVEVA Clearscada vulnerability
DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service (resource consumption) via IP packets containing errors that trigger event-journal messages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6142?
CVE-2013-6142 has a CVSS score indicating it poses a high severity risk due to its potential for remote denial of service.
How does CVE-2013-6142 impact Schneider Electric ClearSCADA systems?
CVE-2013-6142 allows remote attackers to consume resources leading to a denial of service condition in affected ClearSCADA systems.
What versions of ClearSCADA are affected by CVE-2013-6142?
CVE-2013-6142 affects ClearSCADA versions 2010 R2 through R3.1 and 2013 R1 through R1.2.
How can CVE-2013-6142 be mitigated?
Mitigation for CVE-2013-6142 involves applying vendor patches and implementing network security measures to filter malicious IP packets.
Is there an official advisory for CVE-2013-6142?
Yes, there is an official advisory from ICS-CERT regarding CVE-2013-6142, providing details on the vulnerability and its implications.