PatchTheCVEiec104 vulnerabilities and fixes
Recent CVEs affecting iec104, with upgrade or downgrade steps. 2 tracked.
iec104 has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-11-12. Highest priority: CVE-2025-63929 (score 44/100).
- CVE-2025-63929 HIGH 7.5 UPGRADE A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08)
- CVE-2025-63927 MEDIUM 4.0 UPGRADE A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08)
FAQ
How do I fix iec104 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iec104 being exploited right now?
None of the tracked iec104 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iec104 CVE should I patch first?
CVE-2025-63929 currently ranks highest (44/100): A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08).