CVE-2013-2794

{"id": "CVE-2013-2794", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-09-09T11:39:08.443", "references": [{"url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01", "tags": ["US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf", "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line."}, {"lang": "es", "value": "Triangle MicroWorks SCADA Data Gateway 2.50.0309 hasta 3.00.0616, Componentes de protocolo DNP3 .NET 3.06.0.171 hasta 3.15.0.369, y librer\u00edas C DNP3 3.06.0000 hasta 3.15.0000 permiten a un atacante con acceso f\u00edsico causar una denegaci\u00f3n de servicio (bucle infinito) a trav\u00e9s de una entrada manipulada a trav\u00e9s de puerto serie."}], "lastModified": "2013-10-08T17:24:14.033", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.06.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DECC05A-BB49-47AD-841A-0D16582C3BD0"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.07.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CA92BB5-FEAC-4270-8FC4-65476D8258DF"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.08.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB3A505C-89E2-4F5A-AC61-E036ABFC3322"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.09.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "228B39FA-7B51-4AEE-986A-BD0AA3BA2FA6"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.10.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA47CA21-A500-4B38-B103-58E224A39734"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.11.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C10643AE-4541-41DB-8ECF-D4CFD482628B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.12.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A0824BE-769F-439F-A8DC-97F6EBCB81E1"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.13.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93B33FC8-D566-4BC8-97E2-3584BA9AC987"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.14.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFFE40C1-8E33-4295-A0E0-2FA1F5BAF9C6"}, {"criteria": "cpe:2.3:a:trianglemicroworks:ansi_c_source_code_libraries:3.15.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEB98E06-B56D-4168-A94C-8D7FCBA58FEF"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.06.0.171:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFDA2B53-1513-4DDF-B325-025FEFA5E16B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.07.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12E48EA6-095F-49E5-B65E-A780C25C8FCE"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.08.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D7B6492-A0B9-4D68-B39C-D4246A190638"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.09.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E240AFBC-0AF6-4406-B726-2DD7B1CE10AC"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.10.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13026105-3803-44D8-A224-4BA454917231"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.11.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DB5DBE4-796A-4D17-8805-7DB725CCFB4D"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.14.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1F5CDC3-ECE6-486D-AFB1-C570825202DB"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.15.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDF26C3C-1E7B-4243-A5FF-CD80CCCA2FCC"}, {"criteria": "cpe:2.3:a:trianglemicroworks:.net_communication_protocol_components:3.15.0.369:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "045F45E6-DB41-4D65-968B-CD04596004D0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2626C47-B68A-4A21-B5A2-9D64A28A7120"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.50.0309:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69D2B52D-B324-4115-A3BB-51E3BF97758B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9406C4EC-5758-458D-8354-6736CA78A660"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB915370-216E-40DC-AEF5-634230394E00"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0515:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22E5498C-D5F0-43F7-A536-AB65B4DEB49F"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0516:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2099DFC5-F241-4C47-9A17-FE40101A4570"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0517:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1E898A9-7F0E-453C-8509-75E7E1290382"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0518:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E513983A-C6A2-4E07-874B-880F7A013D53"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0528:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6861F70-5798-4B41-BE94-BECCF16752BB"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0529:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B5722CA-130A-46B3-9A30-9661069890AF"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0536:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5E625A4-30E4-4D5B-81B2-B0B0569948DB"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0540:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A6D03B5-2E8C-49E9-8A18-F367F72A4D50"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0544:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF59F8E0-C4BA-4658-9B91-BACD59B9C482"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0545:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD36BB8A-C840-494B-835C-98EB0075CA62"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0552:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FDB5301-887B-4950-A918-113B75D2BDE5"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0553:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76BF9332-5F3E-4230-A742-2019B2DCEB22"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0558:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1610F5AE-3BB1-4BDB-8C88-A2B83DBE39C1"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0561:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E2A4B7A-D8DA-4A1E-8506-A2D377E7568D"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0562:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90EA0A71-B4C7-4F54-A439-4B0FA9637410"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0564:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71B02213-096E-4CA2-8528-64E83EA06D27"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0565:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EA1B917-A27E-4043-BD74-534B13916F3B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0566:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "378C61EE-9420-42D3-9DA2-71F2D459ACE9"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0567:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA21BE3B-6C2E-4479-A9A0-E3966741B832"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0569:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49C97936-8AF3-41D8-8D6B-F6C9C5F4B002"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0570:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3175298-E0A4-4571-BDCC-FDA81675BC67"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0571:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18BF8DF0-93D1-4ACA-BA78-B6DE0080AD52"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0572:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1D5F9B2-38C5-45AC-9A33-80E61BAF0E17"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0573:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00666362-AD62-4942-96E8-C08BF087E34F"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0574:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BC82C89-7D15-452D-8610-23F3952487E9"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0575:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D15DD91-4F01-4B95-8F9A-C4848800BDBB"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0576:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DF57506-CC34-473C-8165-CB26194E80BB"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0577:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC480C77-1950-4C3A-B77E-D2C2AC59FE20"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0578:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2044B8C6-D0C6-4A1E-9798-19912FFAE097"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0579:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40D4B1C5-CE06-4082-9534-513BB99D7D7B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0580:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15E62697-E6BD-4796-9470-F6E125CD3F4C"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0581:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "299D658E-143A-4556-A6FF-37EDA07828CF"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0582:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7619010A-954E-4F5D-8DDB-0ED652E2A306"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0583:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C042A0EB-AB96-4FD2-A19E-4E9101C2C63C"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0584:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8B7B997-4D7F-4A34-822A-3AF52A4FA715"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0586:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E073D1B-4FBF-4DE2-AA5A-1EE8774D20FD"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0587:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2285B98B-3E80-4C5B-9D7D-DA7C250FBAD0"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0588:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EC58901-067E-485B-9723-9F344F306C39"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0589:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4583789-CC14-48BB-83B5-AF1B6896B10B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0590:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CEC3409-0CED-41A8-8718-B0EFCA85DA49"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0591:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4AEB67C-7DAF-44D2-BB32-FD9E86D8EA0A"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0592:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "383DA8F4-1DDD-43A9-8A53-721F5F449CA2"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0594:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AD95D30-4502-44EB-9C0C-D9A45CD24E5C"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0595:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9F60297-9FA4-47F6-98AF-B9662568D76F"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0596:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E593FD2-7158-40D0-9F44-01C06BF96F06"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0597:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D8A435F-8C6D-4584-8DB9-4A0C515F6D3B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0598:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F210B77-F989-4931-AFBF-CEC2A175FC27"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:2.54.0599:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36BBE6AE-BEE1-441B-A5A4-30BD7FCFBF3B"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:3.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F74C4546-500F-405C-B585-6F6C07065808"}, {"criteria": "cpe:2.3:a:trianglemicroworks:scada_data_gateway:3.00.0616:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C679459-44C7-454C-9894-87ABE1F710F2"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}