4.7

CVE-2013-2822

NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NovatechOrion5 Dnp Master Version1.27.38
NovatechOrion5 Dnp Slave Version1.23.10
NovatechOrion5r Dnp Master Version1.27.38
NovatechOrion5r Dnp Slave Version1.23.10
NovatechOrionlx Dnp Master Version1.27.38
NovatechOrionlx Dnp Slave Version1.23.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.132
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.