CVE-2022-2970

9.8 criticalEPSS 1.5%

Critical (9.8) in mz-automation libiec61850. EPSS 1.5% chance of exploitation in the next 30 days.

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-121
Published: 2022-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mz-automation:libiec61850

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-251-01
https://www.cisa.gov/uscert/ics/advisories/icsa-22-251-01

Check your stack JSON