CyberRota Analysis
AI-GeneratedA heap-based buffer overflow vulnerability in lib60870-C 2.4.0 affects the server-side FileSegment ASDU encoding process, where insufficient validation of the ASDU frame's residual capacity can lead to memory corruption. This flaw could allow an attacker to exploit the overflow, potentially leading to arbitrary code execution or denial of service. Organizations utilizing lib60870-C for communication protocols should prioritize addressing this vulnerability to mitigate risks associated with their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalone segment length via FileSegment_GetMaxDataSize() and does not verify the residual capacity of the current ASDU frame before encoding object fields and segment data