289 matches found
CVE-2022-2971
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...
Stack overflow
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...
Null pointer dereference
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e uses a NULL pointer in certain situations. which could allow an attacker to crash the server...
Code injection
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code...
Design/Logic Flaw
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...
CVE-2022-2970
CVE-2022-2970 affects MZ Automation’s libIEC61850 (versions 1.4 and prior; 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e). The issue is a stack-based overflow caused by not sanitizing input before memcpy, which could crash a device or enable remote code execution. Affected products...
CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code...
CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code...
CVE-2022-2972 MZ Automation libIEC61850 Stack-Based Buffer Overflow
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...
CVE-2022-2972 MZ Automation libIEC61850 Stack-Based Buffer Overflow
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...
CVE-2022-2972
CVE-2022-2972 affects MZ Automation’s libIEC61850: stack-based buffer overflow in the library (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e). The flaw allows a crash or remote code execution due to unsanitized input used in memcpy. Impact is severe ...
CVE-2022-2972 MZ Automation libIEC61850 Stack-Based Buffer Overflow
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code...
CVE-2022-2971 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...
CVE-2022-2971 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...
CVE-2022-2971 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload...
CVE-2022-2971
CVE-2022-2971 affects MZ Automation libIEC61850 (versions 1.4 and prior; 1.5 prior to commit a3b04b7) and is a type confusion vulnerability that could cause the server to crash when handling a malicious payload. The available documents identify the root cause as accessing a resource using an inco...
CVE-2022-2973
CVE-2022-2973 describes a NULL pointer dereference in MZ Automation’s libIEC61850 prior to certain fixes. Affected: libIEC61850 versions 1.4 and earlier, and version 1.5 before the commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e. Impact: could cause the server to crash. Root cause: NULL pointer d...
CVE-2022-2973 MZ Automation libIEC61850 NULL Pointer Dereference
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e uses a NULL pointer in certain situations. which could allow an attacker to crash the server...
CVE-2022-2973 MZ Automation libIEC61850 NULL Pointer Dereference
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e uses a NULL pointer in certain situations. which could allow an attacker to crash the server...
CVE-2022-2973 MZ Automation libIEC61850 NULL Pointer Dereference
MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e uses a NULL pointer in certain situations. which could allow an attacker to crash the server...