PT-2013-3934 · Matrikon · Matrikonopc Scada Dnp3 Opc Server

Publicado 2013-09-09 · Atualizado 2013-09-26 · CVE-2013-2791

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MatrikonOPC SCADA DNP3 OPC Server version 1.2.0

Description The issue allows remote attackers to cause a denial of service, resulting in a master-station daemon crash. This can be achieved by sending a malformed DNP3 TCP packet from the IP address of an outstation.

Recommendations For MatrikonOPC SCADA DNP3 OPC Server version 1.2.0, consider implementing packet validation to prevent malformed DNP3 TCP packets from causing a denial of service. As a temporary workaround, restrict access to the master-station daemon to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-2791

Produtos afetados

Matrikonopc Scada Dnp3 Opc Server

Referências · 3

• http://ics-cert.us-cert.gov/advisories/ICSA-13-213-04A · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2791 · Nota de Segurança
• http://opcsupport.com/ics/support/KBAnswer.asp?questionID=2890 · Nota