CVEvulnerability
CVE-2013-2822
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line.
Affected configurations
• novatech orion5 dnp master 1.27.38
• novatech orion5 dnp slave 1.23.10
• novatech orion5r dnp master 1.27.38
• novatech orion5r dnp slave 1.23.10
• novatech orionlx dnp master 1.27.38
• novatech orionlx dnp slave 1.23.10
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01 US Government Resource
- http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01 US Government Resource