CVEvulnerability

CVE-2024-45969

7.5 HIGH Published 2024-11-15 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2024-11-15
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-476

Description

NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious server to Cause a Denial-of-Service via the MMS InitiationResponse message.

Weakness · CWE (1)

CWE-476 NULL Pointer Dereference weakness

References

https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/ encs.eu
https://github.com/mz-automation/libiec61850/commit/7afa40390b26ad1f4cf93deaa0052fe7e357ef33 github.com

CVE-2024-45969

Description

Related

Weakness · CWE (1)

References