CVE-2022-2971: falha de alta gravidade em MZ Automation libIEC61850
MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 1.1%
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
MZ Automation · libIEC61850CVEs relacionadas — MZ Automation libIEC61850
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2972CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.6%CVE-2022-2970CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.5%CVE-2022-1302HIGHMalformed Goose Message in LibIEC61850 may result in a denial of serviceEPSS 1.1%CVE-2022-2973HIGHMZ Automation libIEC61850 NULL Pointer DereferenceEPSS 1.1%CVE-2026-49035CRITICALStack-based Buffer Overflow in MZ Automation libIEC61850EPSS 0.6%CVE-2026-50032HIGHNULL Pointer Dereference in MZ Automation libIEC61850EPSS 0.5%