mz-automation

Top products

The 15 most recently published vulnerabilities affecting mz-automation.

• CVE-2024-45971Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via t...9.8Nov 15, 2024
• CVE-2024-45970Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via t...9.8Nov 15, 2024
• CVE-2024-36702libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.7.4Jun 11, 2024
• CVE-2024-28286In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c. The vulnerability manif...7.5Mar 20, 2024
• CVE-2024-26529An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of src/mms/iso_...7.5Mar 13, 2024
• CVE-2024-25366Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the mms_getnamelis...6.2Feb 20, 2024
• CVE-2023-27772libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c.7.5Apr 13, 2023
• CVE-2023-23205An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c.5.5Feb 24, 2023
• CVE-2022-3976MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal5.5Nov 13, 2022
• CVE-2022-2970MZ Automation libIEC61850 Stack-Based Buffer Overflow10.0Sep 23, 2022
• CVE-2022-2972MZ Automation libIEC61850 Stack-Based Buffer Overflow10.0Sep 23, 2022
• CVE-2022-2971MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')8.6Sep 23, 2022
• CVE-2022-2973MZ Automation libIEC61850 NULL Pointer Dereference8.6Sep 23, 2022
• CVE-2022-21159A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of...7.5Apr 15, 2022
• CVE-2022-1302Malformed Goose Message in LibIEC61850 may result in a denial of service7.5Apr 12, 2022