CVE-2024-45970

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-45970
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45970.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-45970
Published
2024-11-15T00:00:00Z
Modified
2026-08-12T14:52:14Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45970.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "LibIEC61850"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git / github.com/mz-automation/libiec61850

Affected ranges

Type
GIT
Repo
https://github.com/mz-automation/libiec61850
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
519b0208cc79d1af09d5ca40fb9ad1fd93822e93
Fixed
ac925fae8e281ac6defcd630e9dd756264e9c5bc
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.6.0"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v1.*
v1.0.0
v1.0.1
v1.1
v1.2.0
v1.2.1
v1.2.2
v1.3.0
v1.4.0
v1.4.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45970.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "303879781645442864602887848502166107065",
            "length": 612
        },
        "id": "CVE-2024-45970-04b7f047",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc",
        "target": {
            "file": "src/mms/iso_mms/client/mms_client_files.c",
            "function": "parseFileAttributes"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "307511949982169214882580224381524218431",
                "10328641350445122611015829559859122319",
                "156528089482707069043509408737738883259",
                "111828210124929090522473056631811100548",
                "273358915731973005143320774525099221099",
                "230418070759551756736827622160518119504",
                "107497782957833197931359675844746462970",
                "185192457619609961665369183081648911281",
                "320378584721608430663179230857407412054",
                "8812667395594147204254315660381958843",
                "126886765889216431243024891530522974235",
                "3968196394155706714010092786521046588",
                "68539940616786142789724218014687724654",
                "59604605285145441903169955632130004121",
                "122626917515786234905172914050192021898",
                "3968196394155706714010092786521046588",
                "68539940616786142789724218014687724654",
                "246967719078801949673011295946722489062",
                "277155798881339660700122737191282243666",
                "219228220688516715011591658190385254159",
                "184079847354137855071414883259699545590"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-45970-0df03da7",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc",
        "target": {
            "file": "src/mms/iso_mms/client/mms_client_files.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "103170009725023122214798347000222996816",
            "length": 1131
        },
        "id": "CVE-2024-45970-818577b6",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc",
        "target": {
            "file": "src/mms/iso_mms/client/mms_client_files.c",
            "function": "parseDirectoryEntry"
        }
    }
]
vanir_signatures_modified 
"2026-08-12T14:52:14Z"