CVE-2013-2821: Novatech ORION5 Dnp Master

High severity, CVSS 7.1. EPSS: 1.3% chance of exploitation in the next 30 days.

NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attackers to cause a denial of service (driver crash and process restart) via a crafted DNP3 TCP packet.

Affected products

• Novatech ORION5 Dnp Master: version 1.27.38 only
• Novatech ORION5 Dnp Slave: version 1.23.10 only
• Novatech ORION5R Dnp Master: version 1.27.38 only
• Novatech ORION5R Dnp Slave: version 1.23.10 only
• Novatech Orionlx Dnp Master: version 1.27.38 only
• Novatech Orionlx Dnp Slave: version 1.23.10 only

Published 2013-12-21. Last modified 2026-06-16.