Elecsys Director Gateway Improper Input Validation Vulnerability

CVEs (1)

Remediations

• Elecsys has created a patch to mitigate this vulnerability. Customers may obtain this patch by contacting Elecsys customer service at 913-647-0158 or (mailto:[email protected]).
• Because this vulnerability is identified with fuzzing tools, the researchers suggest developers use extensive negative testing during quality control of products. The researchers also suggest blocking DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DNP3-specific rule sets.

Affected Vendors

Affected Products (1)