Improper input validation in Novatech Orion5 Dnp Master
CVE-2013-2821
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attackers to cause a denial of service (driver crash and process restart) via a crafted DNP3 TCP packet.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.
Affected products
- Novatech Orion5_dnp_master — versions 1.27.38
- Novatech Orion5_dnp_slave — versions 1.23.10
- Novatech Orion5r_dnp_master — versions 1.27.38
- Novatech Orion5r_dnp_slave — versions 1.23.10
- Novatech Orionlx_dnp_master — versions 1.27.38
- Novatech Orionlx_dnp_slave — versions 1.23.10
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)