CVE-2013-6142

Опубликовано: 15 янв. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service (resource consumption) via IP packets containing errors that trigger event-journal messages.

Ссылки

http://ics-cert.us-cert.gov/advisories/ICSA-14-014-01
US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-14-014-01
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aveva:clearscada:2010:r2:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2010:r2.1:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2010:r3:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2010:r3.1:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2013:r1:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2013:r1.1:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2013:r1.1a:*:*:*:*:*:*

cpe:2.3:a:aveva:clearscada:2013:r1.2:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00614

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-7wq9-7x8g-43xg

github

больше 3 лет назад