Unscored severity · published Sep 9, 2013
CVE-2013-2794
Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
.net Communication Protocol Components · Trianglemicroworks
3.06.0.171; 3.07.00; 3.08.00; 3.09.00; 3.10.00; 3.11.00; +3 more · source: NVD
AC
Ansi C Source Code Libraries · Trianglemicroworks
3.06.0000; 3.07.0000; 3.08.0000; 3.09.0000; 3.10.0000; 3.11.0000; +4 more · source: NVD
SD
Scada Data Gateway · Trianglemicroworks
2.50; 2.50.0309; 2.51; 2.53; 2.54.0515; 2.54.0516; +34 more · source: NVD
Affected product
NC
.net Communication Protocol Components
Trianglemicroworks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2794
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2794
US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01
www.trianglemicroworks.com
http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf
More from .net Communication Protocol Components
–
CVE-2013-2793
Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000…