COPA-DATA Improper Input Validation

Vulnerabilities 2

• High 7.1
  CVE-2014-2345

  COPA-DATA zenon DNP3 Improper Input Validation

  COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow remote attackers to cause a denial of service (infinite loop and process crash) by …

  COPA-DATA zenon DNP3 Process Gateway (DNP3 outstation) zenon DNP3 NG driver (DNP3 master)
  Jun 5, 2014
• Medium 4.0
  CVE-2014-2346

  COPA-DATA zenon DNP3 Improper Input Validation

  COPA-DATA zenon DNP3 NG driver (DNP3 master) 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway (DNP3 outstation) 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service (infinite loop and proc…

  COPA-DATA zenon DNP3 NG driver (DNP3 master) zenon DNP3 Process Gateway (DNP3 outstation)
  Jun 5, 2014

Revision history

1. 2025-06-09 #2

   Advisory converted into a CSAF

2. 2014-03-06 #1

   Initial Publication

References

• ICS Advisory ICSA-14-154-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-154-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014