CVE-2024-25366

low-risk
Published 2024-02-20

Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the mms_getnamelist_service component.

Do I need to act?

-
0.71% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.2/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Mz-Automation

References (6)

Product https://github.com/mz-automation/libiec61850
Exploit https://github.com/mz-automation/libiec61850/issues/492
Product https://www.mz-automation.de/
Product https://github.com/mz-automation/libiec61850
Exploit https://github.com/mz-automation/libiec61850/issues/492
Product https://www.mz-automation.de/
27
/ 100
low-risk
Severity 20/34 · Moderate
Exploitability 2/34 · Minimal
Exposure 5/34 · Minimal