Albert Spruyt

A NULL pointer dereference in the MMS Client of MZ Automation LibIEC1850 allows a malicious server to cause a Denial-of-Service via the MMS InitiationResponse message. This issue can be exploited by a malicious server, leading to a denial-of-service condition.

The issue is related to multiple buffer overflows in the MMS Client of MZ Automation LibIEC61850. A malicious server can cause a stack-based buffer overflow via the MMS IdentifyResponse message, potentially leading to remote code execution and system compromise.