CVE-2022-2971

🗓️ 23 Sep 2022 15:28:48Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 50 Views

MZ Automation's libIEC61850 (version 1.4 & prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses resource using incompatible type, may crash server with malicious payloa

Reporter	Title	Published	Views	Family All 25
Circl	CVE-2022-2971	9 Sep 202218:30	–	circl
CNNVD	Mz Automation Libiec61850 安全漏洞	8 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2971 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')	23 Sep 202215:28	–	cvelist
EUVD	EUVD-2022-35192	3 Oct 202520:07	–	euvd
ICS	MZ Automation libIEC61850	8 Sep 202200:00	–	ics
NVD	CVE-2022-2971	23 Sep 202216:15	–	nvd
Prion	Design/Logic Flaw	23 Sep 202216:15	–	prion
Positive Technologies	PT-2019-11553 · Unknown +1 · Libiec61850 +1	15 Jul 201900:00	–	ptsecurity
Positive Technologies	PT-2019-14678 · Unknown +1 · Libiec61850 +1	19 Sep 201900:00	–	ptsecurity
Positive Technologies	PT-2019-17971 · Unknown +1 · Libiec61850 +1	11 Jan 201900:00	–	ptsecurity

NVD

Vulners

Node

mz-automation libiec61850Range<1.5.0

[
  {
    "product": "libIEC61850",
    "vendor": "MZ Automation",
    "versions": [
      {
        "lessThanOrEqual": "1.4",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      },
      {
        "lessThan": "Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e",
        "status": "affected",
        "version": "Version 1.5",
        "versionType": "custom"
      }
    ]
  }
]