CVE-2013-6142: DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expe...

Security readout for executives and security teams

This vulnerability can let a remote attacker disrupt affected Schneider Electric ClearSCADA systems by exhausting resources in the DNP3 driver. The likely business impact is loss or degradation of SCADA availability, not confirmed data theft. The provided sources do not include CVSS, patch details, or active exploitation evidence. Exposure is most likely where affected ClearSCADA versions use the DNP3 driver and receive IP network traffic from untrusted or insufficiently segmented networks. Internet exposure is not stated in the sources and should be verified through asset inventory and network review. Treat as a targeted operational availability risk for legacy Schneider SCADA environments. Priority should be higher for plants where affected DNP3 services are reachable across weakly segmented networks or where SCADA downtime has safety, production, or compliance consequences. Mitigation focus: Check Schneider Electric and ICS-CERT guidance for vendor-approved fixes or compensating controls.; Restrict network access to ClearSCADA DNP3 services to trusted OT hosts only.; Segment affected SCADA systems from corporate and internet-reachable networks..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.