PatchTheCVElibiec61850 vulnerabilities and fixes
Recent CVEs affecting libiec61850, with upgrade or downgrade steps. 6 tracked.
libiec61850 has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-11-15. Highest priority: CVE-2024-45971 (score 52/100).
- CVE-2024-36702 HIGH 7.4 DOWNGRADE libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/b
- CVE-2024-45971 CRITICAL 9.8 UPGRADE Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4
- CVE-2024-45970 CRITICAL 9.8 UPGRADE Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd63
- CVE-2024-28286 HIGH 7.5 DOWNGRADE In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseR
- CVE-2024-26529 HIGH 7.5 UPGRADE An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of servic
- CVE-2024-25366 MEDIUM 6.2 DOWNGRADE Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a deni
FAQ
How do I fix libiec61850 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libiec61850 being exploited right now?
None of the tracked libiec61850 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libiec61850 CVE should I patch first?
CVE-2024-45971 currently ranks highest (52/100): Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4.