Skip to content
OpenAdvisories
High · 8.6 CVE-2022-2971 EUVD-2022-35192GHSA-gxrc-qj6f-5vph

MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')

Published Sep 23, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload.

Affected products

VendorProductAffectedFixed
MZ Automation libIEC61850 All – ≤ 1.4, Version 1.5 – < Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e

References