Segmentation Violation in libiec61850 Product by mz-automation
CVE-2023-27772

7.5HIGH

Key Information:

Vendor

Mz-automation

Status
Libiec61850
Vendor
CVE Published:
13 April 2023

What is CVE-2023-27772?

A segmentation violation has been identified in the libiec61850 version 1.5.1, specifically within the function ControlObjectClient_setOrigin() found in the file /client/client_control.c. This flaw could potentially lead to unexpected behavior in applications utilizing this library. Users and organizations relying on libiec61850 should review their systems for this issue and consider applying available patches or updates to enhance security.

References

https://github.com/mz-automation/libiec61850/issues/442
https://github.com/mz-automation/libiec61850/commit/79a8e...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.