PT-2014-4639 · Copa Data · Copa-Data Zenon Dnp3 Ng Driver+1

Published 2014-06-05 · Updated 2014-06-05 · CVE-2014-2346

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions COPA-DATA zenon DNP3 NG driver (DNP3 master) versions 7.10 through 7.11 SP0 build 10238 COPA-DATA zenon DNP3 Process Gateway (DNP3 outstation) versions 7.11 SP0 build 10238 and earlier

Description The issue allows physically proximate attackers to cause a denial of service, resulting in an infinite loop and process crash, via crafted input over a serial line.

Recommendations For COPA-DATA zenon DNP3 NG driver (DNP3 master) versions 7.10 through 7.11 SP0 build 10238, update to a version later than 7.11 SP0 build 10238 to resolve the issue. For COPA-DATA zenon DNP3 Process Gateway (DNP3 outstation) versions 7.11 SP0 build 10238 and earlier, update to a version later than 7.11 SP0 build 10238 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-2346

Affected Products

Copa-Data Zenon Dnp3 Ng Driver

Copa-Data Zenon Dnp3 Process Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-2346 · Security Note
• http://copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=814&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase · Note
• http://copadata.com/no_cache/en/support/knowledge-base-faq.html?tx_hrfaq_pi1%5Bknowledgebase%5D=813&tx_hrfaq_pi1%5Baction%5D=show&tx_hrfaq_pi1%5Bcontroller%5D=knowledgebase · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-154-01 · Note