Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-1522

analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not reject certain non-zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read) via a crafted DNP3 packet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2015-1522
  • Bro » Bro » Version: 1.1
    cpe:2.3:a:bro:bro:1.1
  • Bro » Bro » Version: 1.5.3
    cpe:2.3:a:bro:bro:1.5.3
  • Bro » Bro » Version: 2.0
    cpe:2.3:a:bro:bro:2.0
  • Bro » Bro » Version: 2.1
    cpe:2.3:a:bro:bro:2.1
  • Bro » Bro » Version: 2.2
    cpe:2.3:a:bro:bro:2.2
  • Bro » Bro » Version: 2.3
    cpe:2.3:a:bro:bro:2.3
  • Bro » Bro » Version: 2.3.1
    cpe:2.3:a:bro:bro:2.3.1


Contact Us

Shodan ® - All rights reserved