CVE-2024-36702

libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoderencodeLength function at /asn1/berencoder.c...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

PT-2024-7570 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.4.0 Description: A NULL Pointer Dereference issue was detected in the mmsServer handleFileCloseRequest.c function of src/mms/iso mms/server/mms file service.c, which can cause the application to crash due to a SEGV. The...

CVE-2024-28286

Summary: CVE-2024-28286 affects mz-automation’s libiec61850 v1.4.0. A NULL pointer dereference is triggered in mmsServer_handleFileCloseRequest.c (src/mms/iso_mms/server/mms_file_service.c), leading to a SEGV and application crash. Multiple sources (NVD, Red Hat, OSV, CVE listings, CNNVD, CVE enr...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

libiec61850 Security Vulnerabilities

libIEC61850 is an open source library for the IEC 61850 protocol open source by MZ Automation. A security vulnerability exists in libiec61850 v.1.5.3 and earlier versions, which originated from allowing a remote attacker to cause a denial of service DoS...

CVE-2024-26529

CVE-2024-26529 affects mz-automation libiec61850 prior to and including v1.5.3. The issue lies in the mmsServer_handleDeleteNamedVariableListRequest() function in src/mms/iso_mms/server/mms_named_variable_list_service.c, enabling a remote attacker to cause a Denial of Service. The connected sourc...

CVE-2024-26529

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service DoS via the mmsServerhandleDeleteNamedVariableListRequest function of src/mms/isomms/server/mmsnamedvariablelistservice.c...

PT-2024-20903 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 versions 1.4.0 Description: The issue allows a remote attacker to cause a denial of service via the mmsServer handleGetNameListRequest function to the mms getnamelist service component. Recommendations: For version 1.4.0, consider...

PT-2024-7568 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 versions 1.5.3 and earlier Description: The issue is related to the mmsServer handleDeleteNamedVariableListRequest function in the libIEC61850 library, which is associated with incorrect resource cleanup or deallocation. This can ...

CVE-2023-27772

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...

CVE-2023-27772

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...

CVE-2023-27772

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...

Mz Automation Libiec61850 代码问题漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation libiec61850 version v1.5.1, which stems from the ControlObjectClientsetOrigin function via /client/clientcontrol.c found to contain a segmentation...

CVE-2023-27772

CVE-2023-27772 affects libiec61850 v1.5.1. A segmentation violation is triggered in the function ControlObjectClient_setOrigin() located in /client/client_control.c, as described by multiple feeds. The vulnerability stems from this specific control object origin-setting path and results in a cras...

PT-2023-21339 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.5.1 Description: A segmentation violation issue was discovered in the function ControlObjectClient setOrigin at /client/client control.c. Recommendations: For libiec61850 version 1.5.1, consider disabling the...

CVE-2022-3976

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...

Path traversal

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/isomms/client/mmsclientfiles.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal...