Improper input validation in Schneider-Electric Telvent Sage 3030 Firmware

CVE-2013-6143

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3 traffic.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.014 (68.8th percentile) — read the EPSS interpretation.

Affected products

Schneider-electric Telvent_sage_3030_firmware — versions c3413-500-001d3_p4, c3413-500-001f0_pb
N/a — versions n/a

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)