PatchTheCVEioserver vulnerabilities
Recent CVEs affecting ioserver products. 5 tracked.
ioserver has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-10-19. Highest priority: CVE-2014-0777 (score 50/100).
- CVE-2014-5425 MEDIUM 5.0 UPGRADE IOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds read and mast
- CVE-2014-0777 HIGH 8.3 MITIGATE UPGRADE The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote
- CVE-2013-2790 HIGH 7.8 MITIGATE The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to c
- CVE-2013-2783 HIGH 7.1 DOWNGRADE The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite lo
- CVE-2012-4680 MEDIUM 4.3 MITIGATE Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathn
FAQ
How do I fix ioserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ioserver being exploited right now?
None of the tracked ioserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ioserver CVE should I patch first?
CVE-2014-0777 currently ranks highest (50/100): The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote .