MZ Automation libIEC61850
view advisory published 2022-09-08
Successful exploitation of these vulnerabilities could crash the device being accessed, and buffer overflow conditions could allow remote code execution.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2973US | high7.5 | — | ||
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. which could al… | ||||
| CVE-2022-2972US | critical9.8 | — | ||
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which cou… | ||||
| CVE-2022-2970US | critical9.8 | — | ||
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which coul… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-251-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (3)
- Fixedlibiec61850
MZ Automation recommends users update to the latest version: libIEC61850.
https://github.com/mz-automation/libiec61850 - Fixedlibiec61850
MZ Automation recommends users update to the latest version: libIEC61850.
https://github.com/mz-automation/libiec61850 - Fixedlibiec61850
MZ Automation recommends users update to the latest version: libIEC61850.
https://github.com/mz-automation/libiec61850
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan