PT-2022-2915 · Schneider Electric+2 · Schneider Electric Saitel Dp Rtu+2

Published 2022-05-06 · Updated 2022-05-06 · CVE-2022-6996

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Triangle MicroWorks DNP3 Source Code Library (affected versions not specified)

Description The issue is related to a buffer overflow in the .NET library component of the Triangle MicroWorks DNP3 Source Code Library, used in the Schneider Electric Saitel DP RTU platform for managing public distribution and transmission networks. This could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2022-03504

CVE-2022-6996

Affected Products

.Net Framework

Schneider Electric Saitel Dp Rtu

Triangle Microworks Dnp3 Source Code Library

References · 4

• https://bdu.fstec.ru/vul/2022-03504 · Security Note
• https://trianglemicroworks.com/products/source-code-libraries/dnp-scl-pages/what's-new · Note
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-130-02_Saitel_DP_RTU_Security_Notification.pdf&p_Doc_Ref=SEVD-2022-130-02 · Note
• https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-130-02_Saitel_DP_RTU_Security_Notification.pdf&p_Doc_Ref=SEVD-2022-130-02 · Note