CVE-2024-45971

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-45971
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the MMS IdentifyResponse message.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/ Third Party Advisory
https://github.com/mz-automation/libiec61850/commit/1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*
History

01 Oct 2025, 17:45

Type Values Removed Values Added
References () https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/ - () https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/ - Third Party Advisory
References () https://github.com/mz-automation/libiec61850/commit/1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 - () https://github.com/mz-automation/libiec61850/commit/1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 - Patch
CPE cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*
First Time Mz-automation
Mz-automation libiec61850

18 Nov 2024, 17:11

Type Values Removed Values Added
Summary
  • (es) Varios desbordamientos de búfer en el cliente MMS en MZ Automation LibIEC61850 antes de el commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 permiten que un servidor malintencionado provoque un desbordamiento de búfer basado en la pila a través del mensaje MMS IdentifyResponse.

15 Nov 2024, 19:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-120

15 Nov 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-15 19:15

Updated : 2025-10-01 17:45

NVD link : CVE-2024-45971

Mitre link : CVE-2024-45971

CVE.ORG link : CVE-2024-45971

JSON object : View

Products Affected

mz-automation

  • libiec61850
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')