CVE-2022-2973: falha de alta gravidade em MZ Automation libIEC61850
MZ Automation libIEC61850 NULL Pointer Dereference
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 1.1%
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. which could allow an attacker to crash the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
MZ Automation · libIEC61850CVEs relacionadas — MZ Automation libIEC61850
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2972CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.6%CVE-2022-2970CRITICALMZ Automation libIEC61850 Stack-Based Buffer OverflowEPSS 1.5%CVE-2022-1302HIGHMalformed Goose Message in LibIEC61850 may result in a denial of serviceEPSS 1.1%CVE-2022-2971HIGHMZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')EPSS 1.1%CVE-2026-49035CRITICALStack-based Buffer Overflow in MZ Automation libIEC61850EPSS 0.6%CVE-2026-50032HIGHNULL Pointer Dereference in MZ Automation libIEC61850EPSS 0.5%