CVE-2013-2811 The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent....
HighCVSS 7.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| catapultsoftware catapult dnp3 io driver | <= 7.20.56 | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | <= 7.20 | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20 | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-a | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-b | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-c | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-d | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-e | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-f | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-g | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-h | No fix listed |
| ge intelligent platforms proficy dnp3 io driver | = 7.20-i | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 4.01 | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 7.5 | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 8.0 | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 8.1 | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 8.2 | No fix listed |
| ge intelligent platforms proficy hmiscada ifix | = 5.0 | No fix listed |
| ge intelligent platforms proficy hmiscada ifix | = 5.1 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource
- ics-cert.us-cert.gov us-government-resource
- support.ge-ip.com vendor-advisory
- support.ge-ip.com vendor-advisory