CVE-2013-2822 Details
Description
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01 | CVE | US Government Resource |
| http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01 | [email protected] | US Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| novatech orion5 dnp master | 1.27.38 |
CPE
Remediation
| |
| novatech orion5 dnp slave | 1.23.10 |
CPE
Remediation
| |
| novatech orion5r dnp master | 1.27.38 |
CPE
Remediation
| |
| novatech orion5r dnp slave | 1.23.10 |
CPE
Remediation
| |
| novatech orionlx dnp master | 1.27.38 |
CPE
Remediation
| |
| novatech orionlx dnp slave | 1.23.10 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 29, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Dec 23, 2013 | Initial Analysis | [email protected] |