CVE-2014-2346

COPA-DATA zenon DNP3 Improper Input Validation

CVSS 4 EPSS 0.3%CWE-20

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Jun 2014Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service (infinite loop and process crash) via crafted input over a serial line.

AV:L/AC:H/Au:N/C:N/I:N/A:C

Affected products

COPA-DATA · zenon DNP3 NG driver (DNP3 master)COPA-DATA · zenon DNP3 Process Gateway (DNP3 outstation)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://ics-cert.us-cert.gov/advisories/ICSA-14-154-01 https://www.cisa.gov/news-events/ics-advisories/icsa-14-154-01 http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=813&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase http://www.copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=814&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase