Improper input validation in Copa-Data Zenon Dnp3 Ng Driver (Dnp3 Master)
CVE-2014-2346
COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service (infinite loop and process crash) via crafted input over a serial line.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.
Affected products
- Copa-data Zenon Dnp3 Ng Driver (Dnp3 Master) — versions 7.10 SP0
- Copa-data Zenon Dnp3 Process Gateway (Dnp3 Outstation) — versions 0
- Copadata Zenon_dnp3_ng_driver — versions 7.10, 7.11
- Copadata Zenon_dnp3_process_gateway — versions 7.11
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM)
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM)
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)