CVE-2013-2763 Denial of service in n/a
Remote attackers can cause denial of service in Schneider Electric M340 PLC modules via resource consumption, though the vendor disputes remote exploitability.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-2763?
CVE-2013-2763 is a medium-severity denial of service vulnerability in n/a, published on 4 Apr 2013. It can be exploited over the network, with no action from the victim.
Official description
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it "could not be duplicated" and "an attacker could not remotely exploit this observed behavior to deny PLC control functions.
Weakness: CWE-400
Which versions are affected by CVE-2013-2763?
It affects 12 products.
Products include Schneider-Electric Modicon M340 Bmx Noc 0401 Firmware, Schneider-Electric Modicon M340 Bmx Noe 0100 Firmware, Schneider-Electric Modicon M340 Bmx Noe 0100h Firmware, Schneider-Electric Modicon M340 Bmx Noe 0110 Firmware, Schneider-Electric Modicon M340 Bmx Noe 0110h Firmware, Schneider-Electric Modicon M340 Bmx nor 0200h Firmware and 6 more.
How do I fix CVE-2013-2763?
No fix has been published for CVE-2013-2763 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2013-2763 being exploited?
There is no known exploitation of CVE-2013-2763 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2020-7562 Memory corruption in Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details)
- CVE-2020-7563 Memory corruption in Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details)
- CVE-2020-7564 Memory corruption in Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details)
Sources
Also known as GHSA-p57g-273q-f48w.