CVE-2013-2793

Name: CVE-2013-2793
Creator: NVD / NIST
Published: 2013-09-09T11:39:08.427+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.47%

Last modified Jun 16, 2026

CVE-2013-2793 is a vulnerability of currently unknown severity. Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.. EPSS estimates a 1.47% chance of exploitation in the next 30 days.

Description

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.

Metrics

EPSS Probability

1.47%

70.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Trianglemicroworks	.Net Communication Protocol Components	3.06.0.171
Trianglemicroworks	.Net Communication Protocol Components	3.15.0.369
Trianglemicroworks	Ansi C Source Code Libraries	3.06.0000
Trianglemicroworks	Ansi C Source Code Libraries	3.15.0000
Trianglemicroworks	Scada Data Gateway	2.50
Trianglemicroworks	Scada Data Gateway	2.50.0309
Trianglemicroworks	Scada Data Gateway	3.00.0616

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01US Government Resource
http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf
http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01US Government Resource
http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf

Timeline

Published: Sep 9, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-2793?

How severe is CVE-2013-2793?

Severity scoring for CVE-2013-2793 is pending analysis. The EPSS model estimates a 1.47% probability of exploitation in the next 30 days.

How do I fix CVE-2013-2793?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-2793?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST