Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2013-2787: Alstom e-terracontrol can crash from malformed DNP3 packets
CVE-2013-2787 · published 13 years ago
Summary
Versions 3.5, 3.6, and 3.7 of Alstom e-terracontrol may stop responding when they receive specially crafted DNP3 network messages. This causes the system to enter an endless loop, effectively a denial of service. Apply the vendor's security update or restrict DNP3 traffic to trusted sources to prevent the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| alstom | e-terracontrol |
3.5 3.6 3.7 cpe:2.3:a:alstom:e-terracontrol:3.5:*:*:*:*:*:*:* |
Original advisory text
Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets.
Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets.
References
- http://ics-cert.us-cert.gov/advisories/ICSA-13-282-01 US Government Resource
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.8
High
Type
CWE-20Improper Input Validation
Timeline
Published13 Oct 2013
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-2787 · NVD
Track software like this
Free during beta