CVE-2024-45970

Name of the Vulnerable Software and Affected Versions LibIEC61850 versions before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc

Description The issue is related to multiple buffer overflows in the MMS Client of LibIEC61850. A malicious server can cause a stack-based buffer overflow via the MMS FileDirResponse message. This can be exploited by a malicious server.

Recommendations For versions before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc, update to a version that includes the fix for the buffer overflow vulnerabilities. As a temporary workaround, consider restricting access to the MMS Client to minimize the risk of exploitation.