Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: MZ Automation libIEC61850 Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Clear all filters
TI-2022-02743 CVE-2022-2970 · GHSA-h3j4-vfr6-r3jp

MZ Automation libIEC61850 Stack-Based Buffer Overflow

Priority MEDIUM 52

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01465 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-121
TI-2022-02745 CVE-2022-2972 · GHSA-g993-5jgg-hxg6

MZ Automation libIEC61850 Stack-Based Buffer Overflow

Priority MEDIUM 52

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01564 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-121
TI-2022-02744 CVE-2022-2971 · GHSA-gxrc-qj6f-5vph

MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')

Priority MEDIUM 45

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01083 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-843
TI-2022-02746 CVE-2022-2973 · GHSA-8cpp-2498-rv3h

MZ Automation libIEC61850 NULL Pointer Dereference

Priority MEDIUM 45

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01083 Published 2022-09-23 Fixed in Commit: a3b04b7 CWE-476