Read the docs

MZ Automation

Records65All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

MZ Automation records in CISA KEV

No MZ Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

35 records in Libiec61850 · all components

TI-2022-05561 CVE-2022-21159 · GHSA-wc26-f4h3-2vxx

Infinite loop in MZ Automation libiec61850

Priority HIGH 72

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01825 Published 2022-04-15 No fix listed CWE-835
Priority MEDIUM 52

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01564 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-121
Priority MEDIUM 52

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01465 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-121
Priority MEDIUM 50

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the MMS IdentifyResponse…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00615 Published 2024-11-15 No fix listed CWE-120
Priority MEDIUM 50

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00615 Published 2024-11-15 No fix listed CWE-120
Priority MEDIUM 46

In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer underflow will happen leading to heap buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02036 Published 2020-08-26 Fixed in 1.4.3 CWE-119
Priority MEDIUM 45

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01083 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-476
Priority MEDIUM 45

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01083 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-843
TI-2019-16065 CVE-2019-1010300 · GHSA-6j9c-j7j4-4g23

Memory corruption in MZ Automation libiec61850

Priority LOW 36

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01326 Published 2019-07-15 No fix listed CWE-119
Load more
Open these records in search →