Lucene search
HistorySep 23, 2022 - 4:15 p.m.
CVE-2022-2971
mz automation
libiec61850
vulnerability
resource access
attacker
server crash
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.6%
MZ Automation’s libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload.
Affected configurations
Node
mz-automationlibiec61850Range<1.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mz-automation | libiec61850 | * | cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2022-09-23 16:15:00
osv
osv
CVE-2022-2971
2022-09-23 16:15:10
cvelist
cvelist
cve
cve
CVE-2022-2971
2022-09-23 16:15:10
ics
ics
MZ Automation libIEC61850
2022-09-08 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.6%
Related for NVD:CVE-2022-2971