CVE-2022-2972 CRITICAL

CVE-2022-2972: MZ Automation libIEC61850 Stack-Based Buffer Overflow

Vendor Mz Automation
Product libIEC61850
Weakness CWE-121
Published September 23, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code.

Key dates

02Disclosure timeline

September 23, 2022 CVE published
April 16, 2025 Record updated