CVE-2013-2821: NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier...

Security readout for executives and security teams

This flaw affects NovaTech Orion substation automation systems using specified DNP Master or DNP Slave versions. A remote attacker could crash a DNP driver and force the process to restart, creating a denial-of-service condition in operational technology environments. Exposure is most likely where affected OrionLX, Orion5, or Orion5r devices run DNP Master or DNP Slave services and DNP3 TCP traffic is reachable from untrusted or poorly segmented networks. Treat this as a high-priority OT resilience issue where affected devices support substation operations. The immediate goal is exposure reduction and vendor-guided remediation, not broad emergency action absent evidence of active exploitation. Mitigation focus: Check NovaTech and CISA ICS advisory guidance for approved fixes or compensating controls.; Identify affected OrionLX, Orion5, and Orion5r deployments and their DNP Master or Slave versions.; Restrict DNP3 TCP access to trusted operational networks only..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.