CVE-2024-45970

The vulnerability results from improper handling of MMS FileDirResponse messages by the MMS client in the LibIEC61850 library (CWE-120 — classic buffer overflow). A malicious server can send a specially crafted FileDirResponse that causes a stack buffer overflow on the client side. Due to the lack of input size validation, it is possible to overwrite stack memory, which can lead to taking control of the program's execution flow.

An attacker controlling an MMS server can trigger arbitrary code execution (RCE) on the client device, gain full control over the system, or destabilize it (DoS). Confidentiality, integrity, and availability of the system are potentially compromised to the highest degree.

The LibIEC61850 library must be updated to a version containing commit ac925fae8e281ac6defcd630e9dd756264e9c5bc or later. Details are available in the project's GitHub repository and in the ENCS statement. Until the update is applied, it is recommended to restrict network access to components using the MMS client library and to implement OT/ICS network segmentation.

MZ Automation LibIEC61850 in all versions preceding commit ac925fae8e281ac6defcd630e9dd756264e9c5bc