Vulnerability Details CVE-2013-5741
Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service (transition to the interrupt state) via a crafted packet to TCP port 502.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.9%
CVSS Severity
CVSS v2 Score 7.8
References
- http://blogs.ixiacom.com/ixia-blog/hack-scada-zero-day-vulnerability-discovery-on-the-nano-10-plc/
- http://osvdb.org/ref/97/tri-nano10.txt
- http://www.osvdb.org/97728
- http://blogs.ixiacom.com/ixia-blog/hack-scada-zero-day-vulnerability-discovery-on-the-nano-10-plc/
- http://osvdb.org/ref/97/tri-nano10.txt
- http://www.osvdb.org/97728
Products affected by CVE-2013-5741
-
cpe:2.3:h:triplc:nano-10_plc:-
-
cpe:2.3:o:triplc:nano-10_plc_firmware:r80
-
cpe:2.3:o:triplc:nano-10_plc_firmware:r81