106 matches found
EUVD-2026-76916
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set versions 2.35 through 2.37 (Windows) contains an improper certificate validation vulnerability in its IEC 60870-5-104 TLS client (Task Mode). A network-positioned attacker can bypass certificate validation by presenting a certificate with multiple s...
CVE-2026-90647
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
PT-2026-90725
Name of the Vulnerable Software and Affected Versions ASE/Kalkitech ASE2000 V2 Communication Test Set versions 2.35 through 2.37 Description The IEC 60870-5-104 TLS client Task Mode on Windows contains an improper certificate validation issue. A network-positioned attacker can bypass certificate...
CVE-2026-90647: Improper Certificate Validation
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...
EUVD-2026-70318
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...
CVE-2026-17539
RTU500 (Hitachi Energy) is affected by a NULL pointer dereference in the last entry of the enhanced message queue, triggered under high-load scenarios such as sending GI (General Interrogation) requests at short intervals . This leads to a BCI_IEC104 fatal write error , causing connection interru...
CVE-2026-17539
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...
CVE-2026-17539
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...
PT-2026-84915
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI IEC104 fatal write error, resulting in connection interruption and restart, and...
CVE-2026-17539: NULL Pointer Dereference
RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...
Linux Distros Unpatched Vulnerability : CVE-2026-63033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObjectParseObjectAddress to read one byte...
UBUNTU-CVE-2026-61893
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
CVE-2026-61893
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
CVE-2026-63033
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObjectParseObjectAddress to read one byte past the end of the heap-allocated message buffer...
CVE-2026-63033
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObjectParseObjectAddress to read one byte past the end of the heap-allocated message buffer...
CVE-2026-63033
The connected records identify this CVE as affecting MZ Automation’s lib60870 library and describe an out-of-bounds read: A crafted IEC 60870-5-104 I-frame with a declared object count that exceeds the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap...
CVE-2026-61893: Out-of-bounds Read
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...