Schneider Electric Telvent SAGE Remote Terminal Unit DoS Vulnerability
Last Update Date:
4 Feb 2014 16:15
Release Date:
4 Feb 2014
3135
Views
RISK: Medium Risk
TYPE: Operating Systems - Embedded OS
A vulnerability has been identified in Schneider Electric Telvent SAGE Remote Terminal Unit, which can be exploited by a remote user can cause denial of service conditions.
A remote user can send specially crafted DNP3 data to interrupt communications and cause the target service to temporarily consume excessive CPU resources.
Impact
- Denial of Service
System / Technologies affected
- Telvent SAGE 3030 C3413-500-001D3_P4 (Firmware from 2010)
- Telvent SAGE 3030 C3413-500-001F0_PB (Latest Firmware)
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- The vendor has issued a fix (Schneider Electric RTU Software Security Bulletin number RTUSW 13001).
Vulnerability Identifier
Source
Related Link
Share with