« Volver al listado

CVE-2013-5741

Estado: ModificadaAlta (7.8)—

Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service (transition to the interrupt state) via a crafted packet to TCP port 502.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Triplc — Nano-10 PLCTriplc — Nano-10 PLC Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-5741",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-29T03:42:33.603",
  "references": [
    {
      "url": "http://blogs.ixiacom.com/ixia-blog/hack-scada-zero-day-vulnerability-discovery-on-the-nano-10-plc/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/ref/97/tri-nano10.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/97728",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blogs.ixiacom.com/ixia-blog/hack-scada-zero-day-vulnerability-discovery-on-the-nano-10-plc/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/ref/97/tri-nano10.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/97728",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service (transition to the interrupt state) via a crafted packet to TCP port 502."
    },
    {
      "lang": "es",
      "value": "Dispositivos Triangle Research International Nano-10 PLC con firmware r81 y anteriores no maneja apropiadamente valores grandes de datos en el MODBUS \nlo que permite a atacantes  remotos causar denegación de servicio por transición a estado de interrupción a través de un paquete manipulado dirigido al puerto TCP 502\n"
    }
  ],
  "lastModified": "2026-06-16T23:59:19.853",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:triplc:nano-10_plc_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20F21F2C-9CCA-4111-915E-62E9DF534BF8",
              "versionEndIncluding": "r81"
            },
            {
              "criteria": "cpe:2.3:o:triplc:nano-10_plc_firmware:r80:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08A900EF-C19D-4572-89B5-61EBF0297D4F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:triplc:nano-10_plc:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2060457D-2DEC-477B-9F57-F6A289D75088"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}