CVE-2013-2823: The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driv...

Security readout for executives and security teams

This is an industrial control system availability issue in older DNP3 drivers used with GE Proficy HMI/SCADA products. Crafted serial-line input can force the DNP master station server into an infinite loop, causing denial of service. The attacker is described as physically proximate, which limits reach but matters in operational sites. Exposure is most likely in industrial environments running legacy GE Proficy HMI/SCADA CIMPLICITY or iFIX deployments with the affected DNP3 driver enabled and reachable over a serial DNP3 connection. Prioritize remediation where affected systems support critical operations or where serial interfaces are physically accessible. The main business risk is loss of monitoring or control availability, not confirmed data theft or remote compromise from the supplied evidence. Mitigation focus: Upgrade Catapult DNP3 I/O driver to 7.2.0.60 or later.; Upgrade GE Proficy DNP3 I/O driver to 7.20k or later.; Review GE and ICS-CERT advisories for site-specific guidance..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.