PT-2018-14814 · Unknown · Libiec61850

Fouzhe · Publicado 2018-11-09 · Atualizado 2018-12-07 · CVE-2018-19121

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3

Description A issue has been found in the software, which is a SEGV in the Ethernet receivePacket function located in the ethernet bsd.c file.

Recommendations For libIEC61850 version 1.3, consider restricting access to the Ethernet receivePacket function in ethernet bsd.c to minimize the risk of exploitation until a patch is available.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2018-19121

Produtos afetados

Libiec61850

Referências · 4

• 🔥 https://github.com/mz-automation/libiec61850/issues/85 · Exploit
• 🔥 https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_receivepacket · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19121 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19121 · Aviso do Fabricante