72 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-63033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObjectParseObjectAddress to read one byte...
UBUNTU-CVE-2026-61893
A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...
CVE-2026-63033
The connected records identify this CVE as affecting MZ Automationโs lib60870 library and describe an out-of-bounds read: A crafted IEC 60870-5-104 I-frame with a declared object count that exceeds the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap...
PT-2026-66630
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A crafted IEC 60870-5-104 I-frame with TypeID 104 C TS NA 1 and an inflated object count causes the TestCommand getFromBuffer function to read one byte past the...
PT-2026-62011
Malcolm v26.07.0 adds IEC 60870-5-104 IEC 104 protocol support using CERT.LV's Zeek plugin, including Logstash parsing, ECS normalization, Arkime fields, and a new OpenSearch Dashboards dashboard. This release also fixes three archive extraction and authentication security vulnerabilities; improv...
Hitachi Energy RTU500 NULL Pointer Dereference (CVE-2026-8479)
IEC 60870-5-104 used in bidirectional mode is vulnerable to a NULL pointer dereference; if a specially crafted sequence of messages is sent for a certain time, this causes Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is configured...
CVE-2026-8479
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is...
CVE-2024-9684
FreyrSCADA/IEC-60870-5-104 server v21.06.008 is affected by a denial-of-service vulnerability triggered by specific message sequences. Root cause relates to how the server handles certain sequences, leading to an availability impact. The CVE is referenced across multiple sources (NVD, CVE List, C...
PT-2025-52761
Name of the Vulnerable Software and Affected Versions FreyrSCADA/IEC-60870-5-104 server version 21.06.008 Description The software is susceptible to a denial of service condition. Remote attackers can trigger this by transmitting specifically crafted message sequences. Recommendations Update to a...
airpig2011 IEC104 ๅฎๅ จๆผๆด
airpig2011 IEC104 is a protocol used for power system automation communication by the individual developer dj chen in China. A security vulnerability exists in airpig2011 IEC104 Commit be6d841 and prior versions, which originates from a post-release reuse during multi-threaded execution that coul...
EUVD-2019-16364
Malware in sbrugna...
EUVD-2019-16385
Malware in sbrugna...
EUVD-2024-54517
Malicious code in bioql PyPI...
EUVD-2022-34760
Malicious code in bioql PyPI...
EUVD-2024-54521
Malicious code in bioql PyPI...
EUVD-2023-58051
Malicious code in bioql PyPI...
EUVD-2022-51940
Malicious code in bioql PyPI...
CVE-2023-6711
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an...
CVE-2023-5768
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...
CVE-2019-6810
CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol...