Schweitzer Engineering Laboratories Improper Input Validation

CVSS 7.1 HIGH

CVEs (2)

CVE-2013-2792 CVE-2013-2798

SEL recommends that customers affected by this issue should contact their SEL Sales Representative or Customer Service Representative to obtain a free firmware upgrade CD-ROM packet, including upgrade instructions.
In addition, the researchers suggest the following mitigations: Block DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DPN3-specific rule sets.

SEL

SEL · SEL >=SEL-3530-R100-V0-Z001001-D20090915|<=SEL-3530-R123-V0-Z002001

SEL · SEL >=SEL-3530-4-R107-V0-Z001001-D20100818|<=SEL-3530-4-R123-V0-Z002001-D20130117

SEL · SEL >=SEL-3505-R119-V0-Z001001-D20120720|<=SEL-3505-R123-V0-Z002001-D20130117

SEL · SEL >=SEL-2241-R113-V0-Z001001-D20110721|<=SEL-2241-R123-V0-Z002001-D20130117

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.