Is CVE-2013-2794 actively exploited?

No active exploitation of CVE-2013-2794 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2013-2794 be exploited remotely?

No. CVE-2013-2794 requires local access to exploit.

What is the CVSS score of CVE-2013-2794?

CVE-2013-2794 has a CVSS score of 4.9 (MEDIUM).

HOME VULNERABILITIESCVE-2013-2794

MEDIUM

CVE-2013-2794

CWE-119Published: September 9, 2013· Updated: Jun 16, 2026

4.9

CVSS v3.1

Official Description

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.

NVD Source

Technical Analysis

CVE-2013-2794 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.