PT-2014-3031 · Schneider Electric · Dnp3Driver.Exe+2

Published 2014-01-15 · Updated 2018-12-31 · CVE-2013-6142

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric ClearSCADA versions 2010 R2 through 2010 R3.1 Schneider Electric SCADA Expert ClearSCADA versions 2013 R1 through 2013 R1.2

Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, via IP packets containing errors. These errors trigger event-journal messages in the DNP3Driver.exe component of the affected software.

Recommendations For Schneider Electric ClearSCADA versions 2010 R2 through 2010 R3.1, update to a version outside of this range to resolve the issue. For Schneider Electric SCADA Expert ClearSCADA versions 2013 R1 through 2013 R1.2, update to a version outside of this range to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2013-6142

Affected Products

Clearscada

Dnp3Driver.Exe

Scada Expert Clearscada

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-6142 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-014-01 · Note