CVE-2022-2970 — MZ Automation libIEC61850 Stack-Based Buffer Overflow

CVE-2022-2970

MZ Automation libIEC61850 Stack-Based Buffer Overflow PUBLISHED

Description (CNA)

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
MZ Automation / libIEC61850	affected All through 1.4; affected Version 1.5 before Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e

CWE

CWE-121

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-251-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-251-01

CISA-ADP

No English description supplied.

No references supplied.