Memory Leak Vulnerability in lib60870 Product from MZ Automation
CVE-2023-23205

5.5MEDIUM

Key Information:

Vendor

Mz-automation

Status
Lib60870
Vendor
CVE Published:
24 February 2023

What is CVE-2023-23205?

A memory leak has been identified in the lib60870 library version 2.3.2, specifically within the multi_client_server example code. This vulnerability could potentially lead to increased memory consumption over time, affecting the overall performance of systems utilizing this library for communication. Users are advised to monitor their applications for unusual memory usage and consider exploring updates or patches from the vendor.

References

https://github.com/mz-automation/lib60870/issues/132

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.