Back to overview

CVE-2022-2972

CRITICAL
10.0
CVSS 3.1
Description
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code.

Metadata

CVE ID
CVE-2022-2972
State
PUBLISHED
Assigner
icscert
Reserved
2022-08-23 00:00 UTC
Published
2022-09-23 15:28 UTC
Last updated
2025-04-16 16:09 UTC
Primary CWE
CWE-121
CWE-121 Stack-based Buffer Overflow
Vendor / Product
MZ Automation / libIEC61850
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
MZ Automation libIEC61850 — All ≤ 1.4, Version 1.5 < Commit: a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e
Weakness (CWE)
CWESourceDescription
CWE-121 cna CWE-121 Stack-based Buffer Overflow
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview