What’s Vulnerable › Vulnerabilities

CVE-2013-2794

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-09-09 · updated 2026-06-16
• Weakness: CWE-119

Description

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.

Affected products

• Trianglemicroworks .Net Communication Protocol Components: 3.06.0.171, 3.07.00, 3.08.00, 3.09.00, 3.10.00, 3.11.00 (+3)
• Trianglemicroworks Ansi C Source Code Libraries: 3.06.0000, 3.07.0000, 3.08.0000, 3.09.0000, 3.10.0000, 3.11.0000 (+4)
• Triangle MicroWorks SCADA Data Gateway: 2.50, 2.50.0309, 2.51, 2.53, 2.54.0515, 2.54.0516 (+48)

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01
• http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf
• http://ics-cert.us-cert.gov/advisories/ICSA-13-240-01
• http://www.trianglemicroworks.com/documents/mdnp_scl_whats_new.pdf

Get alerted when CVE-2013-2794 or the next vulnerability affects your stack