PatchTheCVEiec104 project vulnerabilities
Recent CVEs affecting iec104 project products. 3 tracked.
iec104 project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-31. Highest priority: CVE-2020-18731 (score 54/100).
- CVE-2020-20486 HIGH 7.5 DOWNGRADE IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr.
- CVE-2020-18731 HIGH 7.5 DOWNGRADE A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a den
- CVE-2020-18730 HIGH 7.5 DOWNGRADE A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of se
FAQ
How do I fix iec104 project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iec104 project being exploited right now?
None of the tracked iec104 project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iec104 project CVE should I patch first?
CVE-2020-18731 currently ranks highest (54/100): A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a den.