CVE-2024-25366

Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the mms_getnamelist_service component.

Score

CVSS 3.1 6.2 Medium

Status

Analyzed - cve@mitre.org

Published

2024-02-20

Last modified

2024-08-16

Weaknesses

CWE-190

Affected products

• Lib60870 (Mz-automation)
• Libiec61850 (Mz-automation)

References

• https://github.com/mz-automation/libiec61850
• https://github.com/mz-automation/libiec61850/issues/492
• https://www.mz-automation.de/