Improper input validation in Copa-Data Zenon Dnp3 Ng Driver (Dnp3 Master)
CVE-2014-2345
COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.018 (75.9th percentile) — read the EPSS interpretation.
Affected products
- Copa-data Zenon Dnp3 Ng Driver (Dnp3 Master) — versions 7.10 SP0
- Copa-data Zenon Dnp3 Process Gateway (Dnp3 Outstation) — versions 0
- Copadata Zenon_dnp3_ng_driver — versions 7.10, 7.11
- Copadata Zenon_dnp3_process_gateway — versions 7.11
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM)
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM)
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)