Skip to content
OpenAdvisories
Critical ICSA-22-251-01 3 CVEs

MZ Automation libIEC61850

Published Sep 8, 2022 · Updated Sep 8, 2022

Vendor: MZ Automation Product: libIEC61850

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed, and buffer overflow conditions could allow remote code execution.

Vulnerabilities 3

  • Critical 10.0
    CVE-2022-2970

    MZ Automation libIEC61850 Stack-Based Buffer Overflow

    MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

    MZ Automation libIEC61850
  • Critical 10.0
    CVE-2022-2972

    MZ Automation libIEC61850 Stack-Based Buffer Overflow

    MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code.

    MZ Automation libIEC61850
  • High 8.6
    CVE-2022-2973

    MZ Automation libIEC61850 NULL Pointer Dereference

    MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. which could allow an attacker to crash the server.

    MZ Automation libIEC61850

Revision history

  1. #1

    Publication Date

References