PatchTheCVEioserver vulnerabilities and fixes
Recent CVEs affecting ioserver, with upgrade or downgrade steps. 4 tracked.
ioserver has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-10-19. Highest priority: CVE-2013-2790 (score 46/100).
- CVE-2014-5425 MEDIUM 5.0 UPGRADE IOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds read and mast
- CVE-2013-2790 HIGH 7.8 MITIGATE The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to c
- CVE-2013-2783 HIGH 7.1 DOWNGRADE The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite lo
- CVE-2012-4680 MEDIUM 4.3 MITIGATE Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathn
FAQ
How do I fix ioserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ioserver being exploited right now?
None of the tracked ioserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ioserver CVE should I patch first?
CVE-2013-2790 currently ranks highest (46/100): The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to c.