Improper input validation in Subnet Substation Server

CVE-2013-2788

The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.

Affected products

Subnet Substation_server — versions 2.7.0033, 2.8.0106
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)