CVE-2024-9684CWE-119

FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of service by sending specific message sequences

High · published December 23, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
32.5
In the wild
Unconfirmed
What it is

⚡ A remote attacker can trigger a denial of service simply by sending specific message sequences to FreyrSCADA! Talk about a vulnerability that’s as sneaky as a cat burglar! 🚨 Think of it like a disgruntled chef who knows the perfect sequence of orders to send that will jam up the entire kitchen — when the wrong messages flow in, everything grinds to a halt and no meal gets served! An attacker could effectively knock the server offline, interrupting critical processes and potentially causing chaos in industrial applications. This is not just a minor inconvenience; it's a major disruption that could lead to significant operational losses!

Put simply

Think of it like a disgruntled chef who knows the perfect sequence of orders to send that will jam up the entire kitchen — when the wrong messages flow in, everything grinds to a halt and no meal gets served! This vulnerability in FreyrSCADA/IEC-60870-5-104 server version 21.06.008 allows attackers to exploit specific message sequences, leading to a denial of service and shutting down the server’s functionality.

What to do

An attacker could effectively knock the server offline, interrupting critical processes and potentially causing chaos in industrial applications. This is not just a minor inconvenience; it's a major disruption that could lead to significant operational losses! To safeguard your systems, immediately patch to the latest version of FreyrSCADA. Review your server configurations to limit exposure to untrusted sources and monitor network traffic for suspicious activity. You’ve got this! Staying on top of your security game ensures your systems are running smoothly and securely! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-12-23T14:39Z
EPSS history
Timeline
  • 23 DEC 14:39Z
    FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of service by sending specific message sequences
    cvelistv5