Unknown · Libiec61850 · CVE-2019-1010300
Name of the Vulnerable Software and Affected Versions:
libiec61850 versions 1.3.0 through 1.3.2
Description:
The issue is related to a Buffer Overflow, which can cause a software crash. The component affected is the server example complex array. The attack vector involves sending a specific MMS protocol packet.
Recommendations:
For libiec61850 versions 1.3.0 through 1.3.2, consider restricting access to the server example complex array component to minimize the risk of exploitation. As a temporary workaround, avoid processing unverified MMS protocol packets until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.