Ioserver develops a focused portfolio of industrial automation and OPC server products, including OPC drivers and middleware components used in operational technology environments. The vendor's disclosed vulnerabilities cluster around input-handling and memory-safety issues—improper input validation, path traversal, buffer-boundary violations, and out-of-bounds reads—that are characteristic of legacy and embedded industrial software. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ioserver over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-4680MEDIUM Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers | Aug 27, 2012 | 4.3 | 25 | NO | YES |
CVE-2013-2790HIGH The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets to T | Aug 13, 2013 | 7.8 | 24 | NO | NO |
CVE-2013-2783HIGH The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite loop) or obtain unspecified control via crafted data to TCP port 20000. | Jun 14, 2013 | 7.1 | 21 | NO | NO |
CVE-2014-0777HIGH The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service (out-of-bounds read and daemon | Apr 11, 2014 | 7.8 | 20 | NO | NO |
CVE-2014-5425MEDIUM IOServer before Beta2112.exe allows remote attackers to cause a denial of service (out-of-bounds read and master entry consumption) via a null DNP3 header. | Oct 19, 2014 | 5.0 | 19 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ioserver.
Media articles that mention a CVE ID that affects a product developed by Ioserver — matched by CVE ID, not by vendor name.