PT-2014-3032 · Schneider Electric · Telvent Sage 3030 Rtu

Publicado 2014-01-31 · Atualizado 2014-02-10 · CVE-2013-6143

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric Telvent SAGE 3030 RTU versions C3413-500-001D3 P4 through C3413-500-001F0 PB

Description The issue allows remote attackers to cause a denial of service, resulting in a temporary outage and increased CPU consumption, via malformed DNP3 traffic.

Recommendations For versions C3413-500-001D3 P4 through C3413-500-001F0 PB, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CVE-2013-6143

Produtos afetados

Telvent Sage 3030 Rtu

Referências · 2

• http://ics-cert.us-cert.gov/advisories/ICSA-14-006-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6143 · Nota de Segurança