CVE-2013-2811: The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver

This month

HIGH 7.1UPGRADEUPGRADEDOWNGRADE

CVE-2013-2811 is a high-severity flaw (CVSS 7.1) affecting catapult dnp3 i\/o driver, intelligent platforms proficy dnp3 i\/o driver, intelligent platforms proficy hmi\/scada cimplicity. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	7.1 (High)
EPSS exploit chance	1.8% (top 21%)
CISA exploited list	No
Weakness	CWE-20
Published	2013-11-22
Last modified	2026-06-16

Publisher (CNA): ICS-CERT · Vendor: catapultsoftware · ge

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2013-11-22 01:55 UTCPublished CVE record published
2026-06-16 23:54 UTCUpdated Record last modified

catapultsoftware catapult dnp3 i\/o driver UPGRADE

Affected: <= 7.20.56

Fixed in: newer than 7.20.56

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy catapult-dnp3-io-driver || rpm -q catapult-dnp3-io-driver || catapult-dnp3-io-driver --version

2. UPGRADE to newer than 7.20.56 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade catapult-dnp3-io-driver

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade catapult-dnp3-io-driver

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

ge intelligent platforms proficy dnp3 i\/o driver UPGRADE

Affected: <= 7.20 · 7.20 · 7.20 a · 7.20 b · 7.20 c · 7.20 d · 7.20 e · 7.20 f

Fixed in: newer than 7.20

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy intelligent-platforms-proficy-dnp3-io-driver || rpm -q intelligent-platforms-proficy-dnp3-io-driver || intelligent-platforms-proficy-dnp3-io-driver --version

2. UPGRADE to newer than 7.20 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade intelligent-platforms-proficy-dnp3-io-driver

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade intelligent-platforms-proficy-dnp3-io-driver

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

ge intelligent platforms proficy hmi\/scada cimplicity DOWNGRADE

Affected: 4.01 · 7.5 · 8.0 · 8.1 · 8.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 4.01

1. Check installed version

apt-cache policy intelligent-platforms-proficy-hmiscada-cimplicity || rpm -q intelligent-platforms-proficy-hmiscada-cimplicity || intelligent-platforms-proficy-hmiscada-cimplicity --version

2. No fixed release: DOWNGRADE to a release before 4.01 (Debian / Ubuntu)

apt-cache madison intelligent-platforms-proficy-hmiscada-cimplicity sudo apt install intelligent-platforms-proficy-hmiscada-cimplicity=<VERSION_BEFORE_4.01> sudo apt-mark hold intelligent-platforms-proficy-hmiscada-cimplicity

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list intelligent-platforms-proficy-hmiscada-cimplicity sudo dnf downgrade intelligent-platforms-proficy-hmiscada-cimplicity-<VERSION_BEFORE_4.01> sudo dnf versionlock add intelligent-platforms-proficy-hmiscada-cimplicity

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

ge intelligent platforms proficy hmi\/scada ifix DOWNGRADE

Affected: 5.0 · 5.1

Fixed in: no fixed release known

Safe to downgrade to: a release before 5.0

1. Check installed version

apt-cache policy intelligent-platforms-proficy-hmiscada-ifix || rpm -q intelligent-platforms-proficy-hmiscada-ifix || intelligent-platforms-proficy-hmiscada-ifix --version

2. No fixed release: DOWNGRADE to a release before 5.0 (Debian / Ubuntu)

apt-cache madison intelligent-platforms-proficy-hmiscada-ifix sudo apt install intelligent-platforms-proficy-hmiscada-ifix=<VERSION_BEFORE_5.0> sudo apt-mark hold intelligent-platforms-proficy-hmiscada-ifix

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list intelligent-platforms-proficy-hmiscada-ifix sudo dnf downgrade intelligent-platforms-proficy-hmiscada-ifix-<VERSION_BEFORE_5.0> sudo dnf versionlock add intelligent-platforms-proficy-hmiscada-ifix

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2013-2811?

catapult dnp3 i\/o driver: upgrade to newer than 7.20.56; intelligent platforms proficy dnp3 i\/o driver: upgrade to newer than 7.20; intelligent platforms proficy hmi\/scada cimplicity: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2013-2811 being exploited?

CVE-2013-2811 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2013-2811 affect?

CVE-2013-2811 affects catapult dnp3 i\/o driver, intelligent platforms proficy dnp3 i\/o driver, intelligent platforms proficy hmi\/scada cimplicity. Severity is high (CVSS 7.1). The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY

How urgent is CVE-2013-2811?

Priority 45/100. High severity

Related CVEs

CVE-2013-2823 MEDIUM 4.7 UPGRADE UPGRADE The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver

References

← Back to latest CVEs