CVE-2013-2824

Опубликовано: 26 фев. 2014

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.

Ссылки

http://ics-cert.us-cert.gov/advisories/ICSA-13-350-01
Patch
US Government Resource
http://www.citect.schneider-electric.com/security-DoS
Patch
Vendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-13-350-01
Patch
US Government Resource
http://www.citect.schneider-electric.com/security-DoS
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:schneider-electric:citectscada:7.20:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:citectscada:7.20:sp1:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:citectscada:7.20:sp2:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:citectscada:7.20:sp3:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:citectscada:7.20:sp4:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:citectscada:7.30:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:citectscada:7.30:sp1:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:powerlogic_scada:7.20:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:powerlogic_scada:7.20:sr1:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_powerscada_expert:7.30:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_powerscada_expert:7.30:sr1:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.20:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.20:sp1:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.20:sp2:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.20:sp3:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.20:sp4:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.30:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.30:sp1:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:struxureware_scada_expert_vijeo_citect:7.40:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00234

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-hcf2-m3fc-44v4

github

больше 3 лет назад

BDU:2019-03751

CVSS3: 6.5

fstec

почти 12 лет назад

Уязвимость систем для сбора данных и контроля процессов промышленной автоматизации Schneider Electric StruxureWare SCADA Expert Vijeo Citect, Vijeo Citect, CitectSCADA, StruxureWare PowerSCADA Expert и PowerLogic SCADA, связанная с некорректной обработкой исключений, позволяющая нарушителю вызвать отказ в обслуживании