← Database

CVE-2022-21159

HIGH CVSS: 7.5 Published: 2022-04-15 Modified: 2026-06-17

Description

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerability.

Affected Platforms

Mz-Automation Libiec61850

Weakness Type

CWE-835, CWE-835

References