CVE-2018-5475CWE-121

A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior

published February 19, 2018

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow is lurking in GE D60 Line Distance Relay devices running firmware Version 7.11 and earlier! Think of it as a waiter taking your order but miscalculating the meal size, leading to a disastrous spill all over the dining room. One wrong input could cause critical system instability! If exploited, an attacker could potentially execute remote code, causing chaos in the system's operations. This could lead to unauthorized access and potentially devastating consequences for the infrastructure relying on these devices.

Put simply

Think of it as a waiter taking your order but miscalculating the meal size, leading to a disastrous spill all over the dining room. One wrong input could cause critical system instability! This vulnerability allows attackers to overflow the stack memory, enabling them to execute arbitrary code on the device. Essentially, it's like making a dish that overflows the bowl — everything just spills out!

What to do

If exploited, an attacker could potentially execute remote code, causing chaos in the system's operations. This could lead to unauthorized access and potentially devastating consequences for the infrastructure relying on these devices. To protect against this vulnerability, upgrade firmware to a version beyond 7.11 immediately. Regularly audit your devices for updates and consider implementing network segmentation to isolate affected devices. You've got this! Follow these steps to lock down your relay devices and keep your operations running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03793 · 89.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2018-02-19T18:00Z
EPSS history
Timeline
  • 19 FEB 18:00Z
    A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior
    cvelistv5