Vulnerabilities (CVE)

Filtered by vendor Mz-automation Subscribe
Filtered by product Lib60870
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23205 1 Mz-automation 1 Lib60870 2023-12-10 N/A 5.5 MEDIUM
An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c.
CVE-2021-45773 1 Mz-automation 1 Lib60870 2023-12-10 5.0 MEDIUM 7.5 HIGH
A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash.
CVE-2021-21778 1 Mz-automation 1 Lib60870 2023-12-10 5.0 MEDIUM 7.5 HIGH
A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability.
CVE-2019-6137 1 Mz-automation 1 Lib60870 2023-12-10 5.0 MEDIUM 7.5 HIGH
An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference.