What’s Vulnerable › Vulnerabilities

CVE-2013-2790

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-08-13 · updated 2026-06-16
• Weakness: CWE-20

Description

The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets to TCP port 20000.

Affected products

• Ioserver: all versions

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-213-03
• http://ics-cert.us-cert.gov/advisories/ICSA-13-213-03

Get alerted when CVE-2013-2790 or the next vulnerability affects your stack