CVE-2013-2784

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-07-10 · updated 2026-06-16
Weakness: CWE-310

Description

Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for bounds checking of data in Modbus/TCP packets, which allows remote attackers to cause a denial of service (networking outage) via a crafted packet to TCP port 502.

Affected products

Triplc Nano-10 Plc: all versions
Triplc Nano-10 Plc Firmware: through r80

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-189-02
http://ics-cert.us-cert.gov/advisories/ICSA-13-189-02

Get alerted when CVE-2013-2784 or the next vulnerability affects your stack