CVE-2024-45971

CRITICAL

Mz-automation Libiec61850 < 1.6.0 - Buffer Overflow

Title source: rule

Description

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the MMS IdentifyResponse message.

References (2)

Core 2

Core References

Third Party Advisory

https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/

Patch

https://github.com/mz-automation/libiec61850/commit/1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0

View Patch ZIP pw:eip

Scores

CVSS v3 9.8

EPSS 0.0045

EPSS Percentile 63.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-120

Status published

Products (1)

mz-automation/libiec61850 < 1.6.0

Published Nov 15, 2024

Tracked Since Feb 18, 2026