ICSA-14-287-01

icsaUScisa_csaf_ot

GE Proficy HMI/SCADA DNP3 Driver Input Validation

Advisory ansehen veröffentlicht 2014-07-17

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2013-2811UShigh7.1—
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (5)

  • MitigationCIMPLICITY

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationCatapult

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationProficy HMI/SCADA DNP3 I/O Driver (DNP)

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationProficy HMI/SCADA – iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationiFix

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan