MZ Automation lib60870

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value. View CVE Details Affected Products MZ Automation libIEC61850 Vendor:MZ Automation Product Version:MZ Automation libIEC61850: >=v1. 0. 0|<=v1. 6.

1 Product Status:known_affected Remediations Vendor fixMZ Automation recommends updating to the latest build of the libIEC61850 standard. Documentation can be found at https://github. com/mz-automation/libiec61850. https://github. com/mz-automation/libiec61850 Relevant CWE: CWE-228 Improper Handling of Syntactically Invalid Structure Metrics CVSS Version Base Score Base Severity Vector String 3.

1 6. 5 MEDIUM CVSS:3. 1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 4. 0 7. 1 HIGH CVSS:4.