MZ Automation libIEC61850
Advisory ansehen veröffentlicht 2022-09-08
Successful exploitation of these vulnerabilities could crash the device being accessed, and buffer overflow conditions could allow remote code execution.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-2973US | high7.5 | — | ||
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. which could al… | ||||
| CVE-2022-2972US | critical9.8 | — | ||
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which cou… | ||||
| CVE-2022-2970US | critical9.8 | — | ||
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which coul… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-251-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- Behobenlibiec61850
MZ Automation recommends users update to the latest version: libIEC61850.
https://github.com/mz-automation/libiec61850 - Behobenlibiec61850
MZ Automation recommends users update to the latest version: libIEC61850.
https://github.com/mz-automation/libiec61850 - Behobenlibiec61850
MZ Automation recommends users update to the latest version: libIEC61850.
https://github.com/mz-automation/libiec61850
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan