CVE-2022-2970: falha crítica em MZ Automation libIEC61850
MZ Automation libIEC61850 Stack-Based Buffer Overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 1.5%
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
MZ Automation · libIEC61850CVEs relacionadas — MZ Automation libIEC61850
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2972CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.6%CVE-2022-1302HIGHMalformed Goose Message in LibIEC61850 may result in a denial of serviceEPSS 1.1%CVE-2022-2971HIGHMZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')EPSS 1.1%CVE-2022-2973HIGHMZ Automation libIEC61850 NULL Pointer DereferenceEPSS 1.1%CVE-2026-49035CRITICALStack-based Buffer Overflow in MZ Automation libIEC61850EPSS 0.6%CVE-2026-50032HIGHNULL Pointer Dereference in MZ Automation libIEC61850EPSS 0.5%