Unscored severity · published Aug 22, 2013
CVE-2013-2789
The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service (master-station infinite loop) via crafted input over a serial line.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kepserverex · Kepware
before 5.12.140.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2789
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2789
Third Party Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-13-226-01
More from Kepserverex
9.8
CVE-2022-2825
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0
9.1
CVE-2022-2848
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0
7.5
CVE-2023-3825
PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption