Beveiligingsadvies

CVE-2022-2970

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-09-23 15:28:55

Laatst bijgewerkt 2025-04-16 16:09:17

Toegewezen door icscert

CVSS-score 10.0

Status PUBLISHED

Beschrijving

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

← Alle CVE's bekijken Bekijk op cve.org ↗