Improper input validation in Novatech Orion5 Dnp Master
CVE-2013-2822
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.
Affected products
- Novatech Orion5_dnp_master — versions 1.27.38
- Novatech Orion5_dnp_slave — versions 1.23.10
- Novatech Orion5r_dnp_master — versions 1.27.38
- Novatech Orion5r_dnp_slave — versions 1.23.10
- Novatech Orionlx_dnp_master — versions 1.27.38
- Novatech Orionlx_dnp_slave — versions 1.23.10
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)