PT-2013-3934 · Matrikon · Matrikonopc Scada Dnp3 Opc Server

Published 2013-09-09 · Updated 2013-09-26 · CVE-2013-2791

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MatrikonOPC SCADA DNP3 OPC Server version 1.2.0

Description The issue allows remote attackers to cause a denial of service, resulting in a master-station daemon crash. This can be achieved by sending a malformed DNP3 TCP packet from the IP address of an outstation.

Recommendations For MatrikonOPC SCADA DNP3 OPC Server version 1.2.0, consider implementing packet validation to prevent malformed DNP3 TCP packets from causing a denial of service. As a temporary workaround, restrict access to the master-station daemon to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-2791

Affected Products

Matrikonopc Scada Dnp3 Opc Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2791 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-13-213-04A · Note
• http://opcsupport.com/ics/support/KBAnswer.asp?questionID=2890 · Note