https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-5425.htmlhttps://patchthecve.com/cve/CVE-2014-5425.htmlWed, 17 Jun 2026 00:11:32 +0000MEDIUM 5.0: IOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds read and master entry consumption) via a null DNP3 header.https://patchthecve.com/cve/CVE-2013-2790.htmlhttps://patchthecve.com/cve/CVE-2013-2790.htmlTue, 16 Jun 2026 23:53:58 +0000HIGH 7.8: The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets to TCP port 20000.https://patchthecve.com/cve/CVE-2013-2783.htmlhttps://patchthecve.com/cve/CVE-2013-2783.htmlTue, 16 Jun 2026 23:53:57 +0000HIGH 7.1: The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite loop) or obtain unspecified control via crafted data to TCP port 20000.https://patchthecve.com/cve/CVE-2012-4680.htmlhttps://patchthecve.com/cve/CVE-2012-4680.htmlTue, 16 Jun 2026 23:45:33 +0000MEDIUM 4.3: Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in a URI.