What’s Vulnerable › Vulnerabilities

CVE-2013-2825

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-12-04 · updated 2026-06-16
• Weakness: CWE-20

Description

The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and communication outage) via crafted input.

Affected products

• Elecsyscorp Director Dnp3 Outstation Kernel: 2.6.32.11-ae11
• Elecsyscorp Director Industrial Communication Gateway: all versions

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-337-01
• http://ics-cert.us-cert.gov/advisories/ICSA-13-337-01

Get alerted when CVE-2013-2825 or the next vulnerability affects your stack