PT-2014-3837 · Ioserver · Ioserver Opc Server

Published 2014-04-11 · Updated 2025-09-24 · CVE-2014-0777

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions IOServer OPC Server versions 1.0.20 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and daemon crash, via a crafted packet. This is related to the Modbus slave/outstation driver in the OPC Drivers.

Recommendations For versions 1.0.20 and earlier, update to a version later than 1.0.20 to resolve the issue.

Fix

DoS

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-119

CWE-125

Related Identifiers

CVE-2014-0777

Affected Products

Ioserver Opc Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-0777 · Security Note
• http://ioserver.com · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-100-01 · Note
• https://t.me/cveNotify/136360 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-14-100-01 · Note