CVE-2022-2970

🗓️ 23 Sep 2022 15:28:55Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 53 Views

MZ Automation's libIEC61850 version 1.4 and prior does not sanitize input before memcpy is used, leading to potential remote code execution

Reporter	Title	Published	Views	Family All 25
Circl	CVE-2022-2970	9 Sep 202218:30	–	circl
CNNVD	Mz Automation Libiec61850 缓冲区错误漏洞	8 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow	23 Sep 202215:28	–	cvelist
EUVD	EUVD-2022-35191	3 Oct 202520:07	–	euvd
ICS	MZ Automation libIEC61850	8 Sep 202200:00	–	ics
NVD	CVE-2022-2970	23 Sep 202216:15	–	nvd
Prion	Code injection	23 Sep 202216:15	–	prion
Positive Technologies	PT-2019-11553 · Unknown +1 · Libiec61850 +1	15 Jul 201900:00	–	ptsecurity
Positive Technologies	PT-2019-14678 · Unknown +1 · Libiec61850 +1	19 Sep 201900:00	–	ptsecurity
Positive Technologies	PT-2019-17971 · Unknown +1 · Libiec61850 +1	11 Jan 201900:00	–	ptsecurity

NVD

Vulners

Node

mz-automation libiec61850Range<1.5.0

[
  {
    "product": "libIEC61850",
    "vendor": "MZ Automation",
    "versions": [
      {
        "lessThanOrEqual": "1.4",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      },
      {
        "lessThan": "Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e",
        "status": "affected",
        "version": "Version 1.5",
        "versionType": "custom"
      }
    ]
  }
]