The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service (master-station infinite loop) via crafted input over a serial line.

References

• https://nvd.nist.gov/vuln/detail/CVE-2013-2789
• http://ics-cert.us-cert.gov/advisories/ICSA-13-226-01