Vulnerabilities

TI-2026-61630 CVE-2026-90647 · GHSA-gcc5-22r7-2jf2

Improper certificate validation in Kalkitech ASE2000 V2 Communication Test Set

MEDIUM 41

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client (Task Mode).

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00214 Published 2026-09-12 Fixed in 2.38 CWE-295

TI-2021-20150 CVE-2021-44564 · GHSA-q2pf-f9qr-87mv

A security vulnerability originally reported in the SYNC2101 product, and applicable to…

LOW 37

A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00947 Published 2022-01-06 No fix listed

TI-2019-08618 CVE-2019-11536 · GHSA-9hwm-38q8-6jgf

Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0…

MEDIUM 46

Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, and 3.6.1, when WebHMI is not installed, allows an attacker to inject client-side commands or scripts…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01902 Published 2019-05-22 No fix listed

Vulnerabilities

Filters

Improper certificate validation in Kalkitech ASE2000 V2 Communication Test Set

A security vulnerability originally reported in the SYNC2101 product, and applicable to…

Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0…