CVE-2013-2792 — HIGH (7.1) — White Hats Nepal

Vulnerability Description

Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.

CVSS Score

7.1

HIGH

AV:N/AC:M/Au:N/C:N/I:N/A:C

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Selinc	Sel-2241	r113-v0-z001001-d20110721
Selinc	Sel-3505	r119-v0-z001001-d20120720
Selinc	Sel-3530	r100_-v0-z001001-d20090915
Selinc	Sel-3530-4	r107-v0-z001001-d20100818

Related Weaknesses (CWE)

CWE-20

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-219-01US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-219-01US Government Resource

FAQ

What is CVE-2013-2792?

CVE-2013-2792 is a vulnerability with a CVSS score of 7.1 (HIGH). Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.

How severe is CVE-2013-2792?

CVE-2013-2792 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-2792?

Check the references section above for vendor advisories and patch information. Affected products include: Selinc Sel-2241, Selinc Sel-3505, Selinc Sel-3530, Selinc Sel-3530-4.