CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It may be remotely exploitable.
CVE
CVE-2022-2970
Severity
CRITICAL
CVSS
10
EPSS
1.15%
Original NVD Description
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.
Related CVEs
Other vulnerabilities affecting the same vendor(s)