Vulnerability Details CVE-2018-18937
An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-clientdataset_getvalues
- https://github.com/mz-automation/libiec61850/issues/82
- https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-clientdataset_getvalues
- https://github.com/mz-automation/libiec61850/issues/82
Products affected by CVE-2018-18937
-
cpe:2.3:a:mz-automation:libiec61850:1.3