Description
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MZ Automation | libIEC61850 | All – ≤ 1.4, Version 1.5 – < Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e | Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e |
Advisories 1
- ICSA-22-251-01 MZ Automation libIEC61850 CISA ICS & IT advisories · Sep 8, 2022