CVE-2013-2822: NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier...

Security readout for executives and security teams

This issue affects NovaTech Orion substation automation systems using vulnerable DNP Master or DNP Slave components. A person with physical access to the serial line could send malformed input that crashes the driver and restarts the process, causing localized disruption. The source bundle does not show internet-scale exposure or confirmed exploitation. Exposure is most likely in substations or OT environments running the named NovaTech Orion platforms with affected DNP components and accessible serial lines. The described attack requires physical proximity, which lowers broad remote risk but matters in facilities with weak cabinet, port, or site access controls. Prioritize where these Orion systems support critical substation operations or where physical access controls are weak. This is not shown as actively exploited, but OT availability impact can still be business-critical. Assign to OT asset owners for inventory, vendor guidance review, and physical-access validation. Mitigation focus: Check NovaTech and CISA ICS advisory guidance for vendor-supported fixes or mitigations.; Inventory OrionLX, Orion5, and Orion5r systems using affected DNP Master or Slave versions.; Restrict physical access to serial ports, cabinets, substations, and maintenance interfaces..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.