Vulnerability Details CVE-2022-2970
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.9%
CVSS Severity
CVSS v3 Score 10.0
References
Products affected by CVE-2022-2970
-
cpe:2.3:a:mz-automation:libiec61850:1.0.0
-
cpe:2.3:a:mz-automation:libiec61850:1.0.1
-
cpe:2.3:a:mz-automation:libiec61850:1.1
-
cpe:2.3:a:mz-automation:libiec61850:1.1.1
-
cpe:2.3:a:mz-automation:libiec61850:1.1.2
-
cpe:2.3:a:mz-automation:libiec61850:1.2.0
-
cpe:2.3:a:mz-automation:libiec61850:1.2.1
-
cpe:2.3:a:mz-automation:libiec61850:1.2.2
-
cpe:2.3:a:mz-automation:libiec61850:1.3
-
cpe:2.3:a:mz-automation:libiec61850:1.3.0
-
cpe:2.3:a:mz-automation:libiec61850:1.3.1
-
cpe:2.3:a:mz-automation:libiec61850:1.3.2
-
cpe:2.3:a:mz-automation:libiec61850:1.3.3
-
cpe:2.3:a:mz-automation:libiec61850:1.4.0
-
cpe:2.3:a:mz-automation:libiec61850:1.4.1
-
cpe:2.3:a:mz-automation:libiec61850:1.4.2
-
cpe:2.3:a:mz-automation:libiec61850:1.4.2.1
-
cpe:2.3:a:mz-automation:libiec61850:1.4.3
-
cpe:2.3:a:mz-automation:libiec61850:1.5