PT-2013-3931 · Schneider Electric · Substation Server

Adam Crain + 1 · Publicado 2013-09-17 · Atualizado 2013-09-18 · CVE-2013-2788

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SubSTATION Server versions 2.7.0033 through 2.8.0106

Description The issue concerns the DNP3 Slave service, which allows remote attackers to cause a denial of service. This can be achieved through unspecified vectors, resulting in an unhandled exception and process crash.

Recommendations For versions 2.7.0033 through 2.8.0106, consider disabling the DNP3 Slave service as a temporary workaround until a patch is available. Restrict access to the service to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-2788

Produtos afetados

Substation Server

Referências · 2

• http://ics-cert.us-cert.gov/advisories/ICSA-13-252-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2788 · Nota de Segurança