PT-2014-3032 · Schneider Electric · Telvent Sage 3030 Rtu

Published 2014-01-31 · Updated 2014-02-10 · CVE-2013-6143

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric Telvent SAGE 3030 RTU versions C3413-500-001D3 P4 through C3413-500-001F0 PB

Description The issue allows remote attackers to cause a denial of service, resulting in a temporary outage and increased CPU consumption, via malformed DNP3 traffic.

Recommendations For versions C3413-500-001D3 P4 through C3413-500-001F0 PB, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

CVE-2013-6143

Affected Products

Telvent Sage 3030 Rtu

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-6143 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-006-01 · Note