Description
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805
US Government Resource x_refsource_misc
http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01
US Government Resource x_refsource_misc
http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02
Scores
EPSS
0.0076
EPSS Percentile
51.0%
Details
CWE
CWE-20
Status
published
Products (10)
catapultsoftware/catapult_dnp3_i\/o_driver
< 7.20.56
ge/intelligent_platforms_proficy_dnp3_i\/o_driver
7.20 (10 CPE variants)
ge/intelligent_platforms_proficy_dnp3_i\/o_driver
< 7.20
ge/intelligent_platforms_proficy_hmi\/scada_cimplicity
4.01
ge/intelligent_platforms_proficy_hmi\/scada_cimplicity
7.5
ge/intelligent_platforms_proficy_hmi\/scada_cimplicity
8.0
ge/intelligent_platforms_proficy_hmi\/scada_cimplicity
8.1
ge/intelligent_platforms_proficy_hmi\/scada_cimplicity
8.2
ge/intelligent_platforms_proficy_hmi\/scada_ifix
5.0
ge/intelligent_platforms_proficy_hmi\/scada_ifix
5.1
Published
Nov 22, 2013
Tracked Since
Feb 18, 2026