Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2022-2970
HistorySep 23, 2022 - 4:15 p.m.

CVE-2022-2970

2022-09-2316:15:10
Google
osv.dev
7
mz automation
libiec61850
input handling
vulnerability
remote code execution

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

60.8%

JSON

MZ Automation’s libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

Related

nvd 1
cve 1
cvelist 1
prion 1
ics 1
nvd
nvd
CVE-2022-2970
2022-09-23 16:15:10
cve
cve
CVE-2022-2970
2022-09-23 16:15:10
cvelist
cvelist
CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow
2022-09-23 15:28:55
prion
prion
Code injection
2022-09-23 16:15:00
ics
ics
MZ Automation libIEC61850
2022-09-08 12:00:00

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

60.8%

JSON
Related for OSV:CVE-2022-2970
nvd1cve1cvelist1prion1ics1