PT-2022-4739 · Unknown+1 · Libiec61850+1

Published 2021-09-23 · Updated 2024-08-19 · CVE-2022-2970

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libIEC61850 versions 1.4 and prior libIEC61850 version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e

Description The issue is related to the library not sanitizing input before using memcpy, which could allow an attacker to crash the device or remotely execute arbitrary code. This is also associated with a buffer overflow, where data is read beyond the memory buffer boundaries. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For libIEC61850 versions 1.4 and prior, update to a version that includes input sanitization before memcpy is used. For libIEC61850 version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e, apply the commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e to include the necessary input sanitization. As a temporary workaround, consider restricting input to prevent potential buffer overflows until a patch is available.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

ALT-PU-2021-2864

ALT-PU-2024-11160

BDU:2022-05635

CVE-2022-2970

Affected Products

Alt Linux

Libiec61850

References · 9

• https://osv.dev/vulnerability/CVE-2022-2970 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05635 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2970 · Security Note
• https://github.com/mz-automation/libiec61850 · Note
• https://github.com/mz-automation/libiec61850/commit/a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e · Note
• https://t.me/true_secator/3399 · Telegram Post
• https://t.me/cibsecurity/50351 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-251-01 · Note
• https://t.me/cvenotify/36849 · Telegram Post