PT-2013-3946 · Cooper Power Systems · Cooper Power Systems Smp Gateways

Published 2013-12-17 · Updated 2013-12-18 · CVE-2013-2813

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cooper Power Systems SMP gateways versions 4, 4/DP, and 16

Description The issue allows remote attackers to cause a denial of service, resulting in a reboot or link outage, by sending a crafted DNP3 TCP packet to the DNP3 component.

Recommendations For Cooper Power Systems SMP gateways versions 4, 4/DP, and 16, consider implementing network traffic filtering to restrict DNP3 TCP packet reception from untrusted sources until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-2813

Affected Products

Cooper Power Systems Smp Gateways

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-2813 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-13-346-01 · Note