CVE-2024-28286

Summary: CVE-2024-28286 affects mz-automation’s libiec61850 v1.4.0. A NULL pointer dereference is triggered in mmsServer_handleFileCloseRequest.c (src/mms/iso_mms/server/mms_file_service.c), leading to a SEGV and application crash. Multiple sources (NVD, Red Hat, OSV, CVE listings, CNNVD, CVE enr...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

CVE-2024-26529

CVE-2024-26529 affects mz-automation libiec61850 prior to and including v1.5.3. The issue lies in the mmsServer_handleDeleteNamedVariableListRequest() function in src/mms/iso_mms/server/mms_named_variable_list_service.c, enabling a remote attacker to cause a Denial of Service. The connected sourc...

libiec61850 Security Vulnerabilities

libIEC61850 is an open source library for the IEC 61850 protocol open source by MZ Automation. A security vulnerability exists in libiec61850 v.1.5.3 and earlier versions, which originated from allowing a remote attacker to cause a denial of service DoS...

Mz Automation Libiec61850 代码问题漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation libiec61850 version v1.5.1, which stems from the ControlObjectClientsetOrigin function via /client/clientcontrol.c found to contain a segmentation...

CVE-2022-3976

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...

Path traversal

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...

CVE-2022-3976

The CVE-2022-3976 entry concerns MZ Automation libiec61850 (MMS File Services) with a path traversal flaw in the mms_client_files.c component. Affects libiec61850 up to version 1.4; exploitation arises from manipulations of the filename argument, enabling traversal to access restricted paths. A f...

Mz Automation Libiec61850 路径遍历漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A path traversal vulnerability exists in Mz Automation Libiec61850 version 1.4 and earlier, which stems from unknown code in the src/mms/isomms/client/mmsclientfiles.c file of the MMS File Services...

CVE-2022-3976 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...

CVE-2022-3976 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...

CVE-2022-3976 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...

CVE-2022-2973

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e uses a NULL pointer in certain situations. which could allow an attacker to crash the server...

CVE-2022-2972

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...

CVE-2022-2970

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code...

CVE-2022-2971

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...

Stack overflow

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...

Null pointer dereference

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e uses a NULL pointer in certain situations. which could allow an attacker to crash the server...

Design/Logic Flaw

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...