CVE-2022-1302highCWE-20

CVE-2022-1302: falha de alta gravidade em MZ Automation libIEC61850

Malformed Goose Message in LibIEC61850 may result in a denial of service

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar libiec61850

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.1%
In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
MZ Automation · libIEC61850
CVEs relacionadas — MZ Automation libIEC61850

No mesmo produto, das mais perigosas para as menos.

CVE-2022-2972CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.6%CVE-2022-2970CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.5%CVE-2022-2971HIGHMZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')EPSS 1.1%CVE-2022-2973HIGHMZ Automation libIEC61850 NULL Pointer DereferenceEPSS 1.1%CVE-2026-49035CRITICALStack-based Buffer Overflow in MZ Automation libIEC61850EPSS 0.6%CVE-2026-50032HIGHNULL Pointer Dereference in MZ Automation libIEC61850EPSS 0.5%