Alstom e-Terracontrol DNP3 Master Multiple Denial of Service Vulnerabilities
BID:62867
Info
Alstom e-Terracontrol DNP3 Master Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 62867 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-2787 CVE-2013-2818 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 09 2013 12:00AM |
| Updated: | Oct 22 2013 12:16AM |
| Credit: | Adam Crain of Automatak and Chris Sistrunk |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Alstom e-Terracontrol DNP3 Master Multiple Denial of Service Vulnerabilities
e-Terracontrol is prone to multiple denial-of-service vulnerabilities.
Attackers can exploit these issues to trigger the application to enter into an infinite loop, causing it to crash. This can result in denial-of-service conditions.
e-Terracontrol 3.5, 3.6, and 3.7 are vulnerable.
e-Terracontrol is prone to multiple denial-of-service vulnerabilities.
Attackers can exploit these issues to trigger the application to enter into an infinite loop, causing it to crash. This can result in denial-of-service conditions.
e-Terracontrol 3.5, 3.6, and 3.7 are vulnerable.
Exploit / POC
Alstom e-Terracontrol DNP3 Master Multiple Denial of Service Vulnerabilities
An attacker can exploit these issues using readily available tools.
An attacker can exploit these issues using readily available tools.
Solution / Fix
References
Alstom e-Terracontrol DNP3 Master Multiple Denial of Service Vulnerabilities
References:
References: