Vulnerabilities

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages.

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus.

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages.

The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past the end of a heap buffer.

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus.

The MMS server connection handler contains a flaw in its processing of BER-encoded request data.

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment.

The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation.