CVE-2020-20486

IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...

CVE-2020-18730

A segmentation violation in the Iec104DealI function of IEC104 v1.0 allows attackers to cause a denial of service DOS...

CVE-2020-18731

A segmentation violation in the Iec104DealFirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service DOS...

Stack overflow

IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10xStaAddr...

CVE-2020-20486

CVE-2020-20486 affects IEC104 v1.0. The vulnerability is a stack-buffer overflow in the parameter Iec10x_Sta_Addr, as described across multiple sources. CVSS data: CVSS v2 base score 5.0 (Network, Low attack complexity, no authentication, partial impact to availability); CVSS v3.1 base score 7.5 ...

CVE-2020-18731

A segmentation violation in the Iec104DealFirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service DOS...

Sql injection

A segmentation violation in the Iec104DealFirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service DOS...

CVE-2020-18731

The CVE-2020-18731 entry concerns IEC104 v1.0, where a segmentation violation in the Iec104_Deal_FirmUpdate function can cause a denial of service. The connected PT-2021-10228 advisory for IEC104 v1.0 corroborates the affected component and provides a practical workaround: temporarily disable the...