PT-2013-3953 · Roche · Elecsys Director Gateway

Adam Crain + 2 · Published 2013-12-04 · Updated 2014-02-27 · CVE-2013-2825

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and communication outage, via crafted input to the DNP3 service in the Outstation component.

Recommendations For kernel versions 2.6.32.11ael1 and earlier, consider disabling the DNP3 service in the Outstation component as a temporary workaround to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-2825

Affected Products

Elecsys Director Gateway

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-2825 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-13-337-01 · Note