CVE-2013-2823

The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.

• CWE-20

• http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01US Government Resource
• http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02US Government Resource
• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805Vendor Advisory
• http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdfVendor Advisory
• http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01US Government Resource
• http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02US Government Resource
• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805Vendor Advisory
• http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdfVendor Advisory

Published

Nov 22, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2817An ActiveX control in IcoLaunch.dll in Mitsubishi Electric A…
• CVE-2013-2818The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and…
• CVE-2013-2819The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.1…
• CVE-2013-2820The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.1…
• CVE-2013-2821NovaTech Orion Substation Automation Platform OrionLX DNP Ma…
• CVE-2013-2822NovaTech Orion Substation Automation Platform OrionLX DNP Ma…
• CVE-2013-2824Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.…
• CVE-2013-2825The DNP3 service in the Outstation component on Elecsys Dire…
• CVE-2013-2826WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.…
• CVE-2013-2827An unspecified ActiveX control in WellinTech KingSCADA befor…
• CVE-2013-2828The DNP Master Driver in the OSIsoft PI Interface before 3.1…
• CVE-2013-2829MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows…