CVE-2013-2823

Name: CVE-2013-2823
Creator: NVD / NIST
Published: 2013-11-22T01:55:03.917+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.76%

Last modified Jun 16, 2026

CVE-2013-2823 is a vulnerability of currently unknown severity. The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.. EPSS estimates a 0.76% chance of exploitation in the next 30 days.

Description

The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.

Metrics

EPSS Probability

0.76%

50.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions	Update
Catapultsoftware	Catapult Dnp3 I\/O Driver	<= 7.20.56	—
Ge	Intelligent Platforms Proficy Dnp3 I\/O Driver	<= 7.20	J
Ge	Intelligent Platforms Proficy Dnp3 I\/O Driver	7.20	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	4.01	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	7.5	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	8.0	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	8.1	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	8.2	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Ifix	5.0	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Ifix	5.1	—

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02US Government Resource
http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805Vendor Advisory
http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdfVendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02US Government Resource
http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805Vendor Advisory
http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdfVendor Advisory

Timeline

Published: Nov 22, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-2823?

How severe is CVE-2013-2823?

Severity scoring for CVE-2013-2823 is pending analysis. The EPSS model estimates a 0.76% probability of exploitation in the next 30 days.

How do I fix CVE-2013-2823?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-2823?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST