MZ Automation libIEC61850 Stack-Based Buffer Overflow
Priority MEDIUM 52CWE-121Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01465 73rd percentileScored 2026-11-07
Fix Fixed libIEC61850 (MZ Automation): Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| MZ Automation | libIEC61850 | All – 1.4; Version 1.5 to before Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e | Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e | Patch available | CNA |
- libIEC61850 VendorMZ Automation Affected All – 1.4; Version 1.5 to before Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Fixed in Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:* | before 1.5.0 | Vulnerable | MZ Automation |
- cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:* Versions before 1.5.0 Vulnerable ·MZ Automation
Remediation
- Fix · CNA libIEC61850 (MZ Automation) Fixed in Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
MZ Automation libIEC61850 Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e
4 records Highest priority Priority MEDIUM 4 MEDIUM
Other records, highest priority first
- TI-2022-02745 MZ Automation libIEC61850 Stack-Based Buffer OverflowPriority MEDIUM 52
- TI-2022-02746 MZ Automation libIEC61850 NULL Pointer DereferencePriority MEDIUM 45
- TI-2022-02744 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')Priority MEDIUM 45
Timeline
- 2026-10-02 Threatist record created from CVE-2022-2970
- 2026-10-03 Alias added: GHSA-h3j4-vfr6-r3jp
References
More MZ Automation Libiec61850 vulnerabilities
- TI-2024-18824 In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the… CVSS 3.1HIGH 7.5
- TI-2022-05561 Infinite loop in MZ Automation libiec61850 CVSS 3.1HIGH 7.5
- TI-2024-24382 libiec61850 v1.5 was discovered to contain a heap overflow via the… CVSS 3.1HIGH 7.4
- TI-2018-13431 An issue has been found in libIEC61850 v1.3. CVSS 3.0CRITICAL 9.8
- TI-2022-02745 MZ Automation libIEC61850 Stack-Based Buffer Overflow CVSS 3.1CRITICAL 10.0
- TI-2024-30853 Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-2970 · CVE Program
- CVE-2022-2970 · NVD
- FIRST EPSS
- GHSA-h3j4-vfr6-r3jp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences