Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-2970

MZ Automation libIEC61850 Stack-Based Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MZ Automation libIEC61850

  • All to ≤ 1.4affected
  • Version 1.5 to < Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10eaffected

References