| Package | Affected versions | Patched versions |
|---|---|---|
| catapult dnp3 i/o driver | ≤ 7.20.56 | |
| intelligent platforms proficy dnp3 i/o driver | = 7.20≤ 7.20 | |
| intelligent platforms proficy hmi/scada cimplicity | = 4.01= 7.5= 8.0= 8.1= 8.2 | |
| intelligent platforms proficy hmi/scada ifix | = 5.0= 5.1 |
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free