CVE-2022-2972CWE-121

MZ Automation libIEC61850 Stack-Based Buffer Overflow

Critical · published September 23, 2022

CVSS v3.1
10.0
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in libIEC61850 can crash devices or let attackers execute code from afar. 🔥 Think of this vulnerability like a faulty assembly line where one misplaced part can jam the entire factory — once it breaks down, the whole system is at risk! If exploited, an attacker could take control of your device, leading to unauthorized access, operational disruptions, or even critical failures in systems relying on libIEC61850. The consequences could be absolutely devastating for your infrastructure!

Put simply

Think of this vulnerability like a faulty assembly line where one misplaced part can jam the entire factory — once it breaks down, the whole system is at risk! This vulnerability in libIEC61850 (versions 1.4 and prior; 1.5 before a specific commit) can be triggered by causing a stack overflow, allowing an attacker to overwrite memory and execute arbitrary code remotely.

What to do

If exploited, an attacker could take control of your device, leading to unauthorized access, operational disruptions, or even critical failures in systems relying on libIEC61850. The consequences could be absolutely devastating for your infrastructure! To safeguard against this vulnerability, update to version 1.5 after the commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e. Additionally, review your systems for any potential exposure to actors who may exploit this flaw, and consider implementing defensive coding practices. You've got this! With the right updates and precautions, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01564 · 75.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-09-23T15:28Z
EPSS history
Timeline
  • 23 SEP 15:28Z
    MZ Automation libIEC61850 Stack-Based Buffer Overflow
    cvelistv5