Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2024-45970: MMS Client in MZ Automation LibIEC61850 Can Be Crashed by Malicious Server
CVE-2024-45970 · published 1 year ago
Summary
A bug in the MMS Client in MZ Automation LibIEC61850 can be exploited by a malicious server to crash the system. This could lead to a denial of service or potentially allow the attacker to execute malicious code. To fix this issue, update the MZ Automation LibIEC61850 to the latest version, which includes a patch for this vulnerability.
What to do
- Update mz-automation libiec61850 to version 1.6.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mz-automation | libiec61850 |
< 1.6.0 cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:* |
Original advisory text
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via t...
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message.
References
- https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automati... URL
- https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd... Patch
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45970... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45970 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-120Classic Buffer Overflow
Timeline
Published15 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta