StruxureWare SCADA Expert ClearSCADA < 2013 R2 Remote DoS

medium Nessus Plugin ID 72201

Language:

Synopsis

The remote web server is affected by a remote denial of service vulnerability.

Description

The remote web server is a version of StruxureWare SCADA Expert ClearSCADA (formerly Schneider Electric ClearSCADA) prior to 2013 R2. It is, therefore, affected by a remote denial of service vulnerability due to a flaw in DNP3Driver.exe.

An attacker can potentially exploit this vulnerability by sending specially crafted IP packets to crash the DNP3 process, leading to a denial of service.

Solution

Upgrade to ClearSCADA 2013 R2 or later.

Plugin Details

Severity: Medium

ID: 72201

File Name: scada_clearscada_2013_r2.nbin

Version: 1.86

Type: remote

Family: SCADA

Published: 1/29/2014

Updated: 3/19/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:schneider-electric:clearscada

Required KB Items: www/ClearSCADA

Exploit Ease: No known exploits are available

Patch Publication Date: 12/5/2013

Vulnerability Publication Date: 12/5/2013

Reference Information

CVE: CVE-2013-6142

BID: 64813

ICSA: 14-014-01

Detections

Analytics