Top Server OPC Improper Input Validation Vulnerability

CVEs (1)

Remediations

• Software Toolbox has produced a new version of the software, Version 5.12.140.0, which resolves the vulnerability. This version was released June 18, 2013. Information and support about various versions are available at the Software Toolbox Top Server OPC I/O Server support site (registration required): (http://www.toolboxopc.com/html/v5_releasehistory.asp).
• The most current version of TOP Server available is Version 5.12.142.0 R2 (issued August 5, 2013): (http://www.toolboxopc.com/html/support.asp).
• The researchers suggest the following mitigations: Block DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DPN3-specific rule sets.

Affected Vendors

Affected Products (1)