Sign-up

ID

VAR-201305-0093


CVE

CVE-2013-0666


TITLE

MatrikonOPC Security Gateway Service operation in the configuration utility (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-002528

DESCRIPTION

The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service (unhandled exception and application crash) via a TCP RST packet. MatrikonOPC is the world's largest OPC developer and supplier. MatrikonOPC A and E Historian and Security Gateway handle a specially crafted reset message (RST). Multiple MatrikonOPC products are prone to a remote denial-of-service vulnerability. A vulnerability exists in the configuration utility in version 1.0 of MatrikonOPC Security Gateway

Trust: 2.52

sources: NVD: CVE-2013-0666 // JVNDB: JVNDB-2013-002528 // CNVD: CNVD-2013-04622 // BID: 59535 // VULHUB: VHN-60668

AFFECTED PRODUCTS

vendor:matrikonopcmodel:security gatewayscope:eqversion:1.0

Trust: 2.7

vendor:matrikonopcmodel:matrikon a and e historianscope:eqversion:1.0.0.0

Trust: 0.6

vendor:matrikonopcmodel:matrikon security gatewayscope:eqversion:1.0

Trust: 0.6

vendor:matrikonopcmodel:a&e historianscope:eqversion:1.0.0.0

Trust: 0.3

sources: CNVD: CNVD-2013-04622 // BID: 59535 // JVNDB: JVNDB-2013-002528 // CNNVD: CNNVD-201305-004 // NVD: CVE-2013-0666

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-0666
value: MEDIUM

Trust: 1.0

NVD: CVE-2013-0666
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2013-04622
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201305-004
value: MEDIUM

Trust: 0.6

VULHUB: VHN-60668
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2013-0666
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2013-04622
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-60668
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2013-04622 // VULHUB: VHN-60668 // JVNDB: JVNDB-2013-002528 // CNNVD: CNNVD-201305-004 // NVD: CVE-2013-0666

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-60668 // JVNDB: JVNDB-2013-002528 // NVD: CVE-2013-0666

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201305-004

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201305-004

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-002528

PATCH
title:OPC Securityurl:http://www.matrikonopc.com/products/opc-security/index.aspx
Trust: 0.8
title:Patch for Multiple MatrikonOPC Product Denial of Service Vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/33742
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2013-04622 // 
            
            
            
            JVNDB: JVNDB-2013-002528

EXTERNAL IDS
db:ICS CERTid:ICSA-13-106-01
Trust: 3.4
db:NVDid:CVE-2013-0666
Trust: 3.4
db:BIDid:59535
Trust: 1.0
db:JVNDBid:JVNDB-2013-002528
Trust: 0.8
db:CNNVDid:CNNVD-201305-004
Trust: 0.7
db:CNVDid:CNVD-2013-04622
Trust: 0.6
db:VULHUBid:VHN-60668
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2013-04622 // 
            
            
            
            VULHUB: VHN-60668 // 
            
            
            
            BID: 59535 // 
            
            
            
            JVNDB: JVNDB-2013-002528 // 
            
            
            
            CNNVD: CNNVD-201305-004 // 
            
            
            
            NVD: CVE-2013-0666

REFERENCES
url:http://ics-cert.us-cert.gov/advisories/icsa-13-106-01
Trust: 3.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-0666
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-0666
Trust: 0.8
url:http://www.matrikonopc.com/
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2013-04622 // 
            
            
            
            VULHUB: VHN-60668 // 
            
            
            
            BID: 59535 // 
            
            
            
            JVNDB: JVNDB-2013-002528 // 
            
            
            
            CNNVD: CNNVD-201305-004 // 
            
            
            
            NVD: CVE-2013-0666

CREDITS
Dillon Beresford of Cimation
Trust: 0.3
sources:
            
            
            BID: 59535

SOURCES
db:CNVDid:CNVD-2013-04622
db:VULHUBid:VHN-60668
db:BIDid:59535
db:JVNDBid:JVNDB-2013-002528
db:CNNVDid:CNNVD-201305-004
db:NVDid:CVE-2013-0666

LAST UPDATE DATE
2025-04-11T22:55:59.058000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2013-04622date:2013-05-20T00:00:00
db:VULHUBid:VHN-60668date:2013-05-01T00:00:00
db:BIDid:59535date:2013-04-26T00:00:00
db:JVNDBid:JVNDB-2013-002528date:2013-05-02T00:00:00
db:CNNVDid:CNNVD-201305-004date:2013-05-02T00:00:00
db:NVDid:CVE-2013-0666date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:CNVDid:CNVD-2013-04622date:2013-05-03T00:00:00
db:VULHUBid:VHN-60668date:2013-05-01T00:00:00
db:BIDid:59535date:2013-04-26T00:00:00
db:JVNDBid:JVNDB-2013-002528date:2013-05-02T00:00:00
db:CNNVDid:CNNVD-201305-004date:2013-05-02T00:00:00
db:NVDid:CVE-2013-0666date:2013-05-01T12:00:08.080