Stack-Based Buffer Overflow in MZ Automation's libIEC61850

Stack-Based Buffer Overflow in MZ Automation's libIEC61850

CVE-2022-2972 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code.

Learn more about our Web Application Penetration Testing UK.