CVE-2013-2811

highPriorität · verfolgen · 29EPSS 0.018 · 79. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.85% (79th) EPSS
CVSS 7.1 · high
Is it mine?
30 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationCatapult Software DNP driver (“DNP”)cisa_csaf_ot

    The researchers suggest blocking DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DNP3-specific rule sets to add an additional layer of protection.

  • MitigationProficy human-machine interface/supervisory control and data acquisition (HMI/SCADA) – iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems)cisa_csaf_ot

    The researchers suggest blocking DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DNP3-specific rule sets to add an additional layer of protection.

  • MitigationProficy HMI/SCADA—iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systems)cisa_csaf_ot

    The researchers suggest blocking DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DNP3-specific rule sets to add an additional layer of protection.

  • MitigationProficy human-machine interface/supervisory control and data acquisition (HMI/SCADA) DNP3 I/O Driver (“DNP”)cisa_csaf_ot

    The researchers suggest blocking DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DNP3-specific rule sets to add an additional layer of protection.

  • MitigationCIMPLICITYcisa_csaf_ot

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationCatapultcisa_csaf_ot

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationProficy HMI/SCADA DNP3 I/O Driver (DNP)cisa_csaf_ot

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationProficy HMI/SCADA – iFIX or CIMPLICITY servers with the vulnerable I/O Driver installed (this includes iFIX or CIMPLICITY installations that are part of Proficy Process Systemscisa_csaf_ot

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
  • MitigationiFixcisa_csaf_ot

    To obtain the latest version of any I/O driver please visit GE’s web site at (http://support.ge-ip.com) and, in the right column, look for “Quick Picks” > “Downloads” > “I/O Drivers.”

    http://support.ge-ip.com
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6–7.8

v2.07.1highAV:N/AC:M/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 6.9
v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Csecondary · CISA US
v2.06mediumAV:N/AC:M/Au:N/C:N/I:N/A:C/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USprimärCWE-20US
04

betroffene Produkte (30)

Betroffene Produkte und Versionsbereiche.

20 von 30 angezeigt
05

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-13-297-01Catapult Software DNP3 Driver Improper Input Validation2013-07-27icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-13-297-02GE Proficy DNP3 Improper Input Validation2013-07-27icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-14-287-01GE Proficy HMI/SCADA DNP3 Driver Input Validation2014-07-17icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2013-11-22geändert 2026-06-16
09

Referenzen (13)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan