CVE-2013-2822

Published: Dec 21, 2013Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line.

Affected (6)

Products: Novatech: Orion5 Dnp Master, Orion5 Dnp Slave, Orion5r Dnp Master, Orion5r Dnp Slave, Orionlx Dnp Master, Orionlx Dnp Slave

6 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Novatech Orion5 Dnp Master	Version 1.27.38
Novatech Orion5 Dnp Slave	Version 1.23.10
Novatech Orion5r Dnp Master	Version 1.27.38
Novatech Orion5r Dnp Slave	Version 1.23.10
Novatech Orionlx Dnp Master	Version 1.27.38
Novatech Orionlx Dnp Slave	Version 1.23.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01

Source: ics-cert@hq.dhs.gov

US Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.