CVE-2022-2970
MZ Automation libIEC61850 Stack-Based Buffer Overflow
Résumé
MZ Automation libIEC61850 Stack-Based Buffer Overflow
Description d'origine
La description telle que publiée par la source (souvent en anglais).
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory cisa.gov