CVE-2013-2816

Published: Dec 17, 2013Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service (reboot or link outage) via crafted input over a serial line.

Affected (3)

Products: Cooperindustries: Smp 16 Gateway (data Concentrator), Smp 4/dp Gateway (data Concentrator), Smp 4 Gateway (data Concentrator)

Cooperindustries

3 products

Smp 16 Gateway (data Concentrator)

Smp 4/dp Gateway (data Concentrator)

Smp 4 Gateway (data Concentrator)

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cooperindustries Smp 16 Gateway (data Concentrator)	All versions
Cooperindustries Smp 4/dp Gateway (data Concentrator)	All versions
Cooperindustries Smp 4 Gateway (data Concentrator)	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://ics-cert.us-cert.gov/advisories/ICSA-13-346-01

Source: ics-cert@hq.dhs.gov

US Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-13-346-01

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.