CVE-2013-2790

Published: Aug 13, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets to TCP port 20000.

Affected (1)

Products: Ioserver: Ioserver

Ioserver

1 product

Ioserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ioserver Ioserver	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://ics-cert.us-cert.gov/advisories/ICSA-13-213-03

Source: ics-cert@hq.dhs.gov

US Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-13-213-03

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.