CVE-2022-2970

🗓️ 23 Sep 2022 15:28:55Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 102 Views

MZ Automation's libIEC61850 version 1.4 and prior does not sanitize input before memcpy is used, leading to potential remote code execution

Reporter	Title	Published	Views	Family All 29
BDU FSTEC	libIEC61850 Buffer Overflow	9 Sep 202200:00	–	bdu_fstec
Circl	CVE-2022-2970	9 Sep 202218:30	–	circl
CNNVD	Mz Automation Libiec61850 buffer error vulnerability	8 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow	23 Sep 202215:28	–	cvelist
EUVD	EUVD-2022-35191	3 Oct 202520:07	–	euvd
ICS	MZ Automation libIEC61850	8 Sep 202200:00	–	ics
Mend	CVE-2022-2970	23 Sep 202215:28	–	mend
NVD	CVE-2022-2970	23 Sep 202216:15	–	nvd
osv_cve	CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow	23 Sep 202215:28	–	osv_cve
Prion	Code injection	23 Sep 202216:15	–	prion

NVD

Vulners

Node

mz-automation libiec61850Range<1.5.0

[
  {
    "product": "libIEC61850",
    "vendor": "MZ Automation",
    "versions": [
      {
        "lessThanOrEqual": "1.4",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      },
      {
        "lessThan": "Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e",
        "status": "affected",
        "version": "Version 1.5",
        "versionType": "custom"
      }
    ]
  }
]