CVE-2014-2345

COPA-DATA zenon DNP3 Improper Input Validation

CVSS 7.1 EPSS 1.8%CWE-20

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.1EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Jun 2014Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP.

AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected products

COPA-DATA · zenon DNP3 NG driver (DNP3 master)COPA-DATA · zenon DNP3 Process Gateway (DNP3 outstation)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://ics-cert.us-cert.gov/advisories/ICSA-14-154-01 https://www.cisa.gov/news-events/ics-advisories/icsa-14-154-01 http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=813&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=814&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase