{"id":"CVE-2022-3976","summary":"MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal","details":"A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/iso_mms/client/mms_client_files.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal. Upgrading to version 1.5 is able to address this issue. The name of the patch is 10622ba36bb3910c151348f1569f039ecdd8786f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213556.","modified":"2026-08-12T13:33:16.517738Z","published":"2022-11-13T00:00:00Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-22"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3976.json"},"references":[{"type":"WEB","url":"https://vuldb.com/?id.213556"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3976.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3976"},{"type":"FIX","url":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f"},{"type":"PACKAGE","url":"https://github.com/mz-automation/libiec61850"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mz-automation/libiec61850","events":[{"introduced":"0"},{"fixed":"fcefc746fea286aeaa40d2f62240216da81c85e5"},{"fixed":"10622ba36bb3910c151348f1569f039ecdd8786f"}],"database_specific":{"cpe":"cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.5"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["1.0","1.1","1.2","1.3","1.4","v1.5.1","v1.5.0","v1.4.1","v1.4.0","v1.2.0","v1.3.0","v1.2.2","v1.2.1","v1.1","v1.0.1","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3976.json","vanir_signatures_modified":"2026-08-12T13:33:16Z","vanir_signatures":[{"digest":{"function_hash":"220168528364961616577742169346594685633","length":3127},"id":"CVE-2022-3976-12ce5ad1","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/server/mms_file_service.c","function":"mmsServer_handleObtainFileRequest"},"deprecated":false},{"source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/client/mms_client_files.c"},"deprecated":false,"digest":{"line_hashes":["140719808659767843146279232704180978741","53458575049793877608361521384763333270","87979454616608268597675365121043185984","55816824453777608157420347796588591725","273088376172010382471209048210557713962","165805141340672720989833409762255184081","161149221575513148414487335375643796610","5446015152398187109602408195850215421","24685279666081754327226081722797523644","316633133207587250185992563671246708426","148213378201347753876712205536060696025","322328492251177146622569086079340188853","187026788376214441054661842347104673180","137832749229578068099966348746767164314","249237235901664365868343470718497404018","43091692302596405030011237118442783658","226183500424070675983712518442890514278","293089109730880681159455672819132282458","215334597246882058032136600864339313118","194970859733327222803809377199470964518","135275161631059363929004914556597183252","288555908632629094026097495687701890668","330839548494386176158935900909413872937","191805962171823240384528173515879299763","79341798605673888826159739989901084394","220095333102465326483884603347010033051","267909783440874247632437162025633713230","266366977731117959977226696949302765933"],"threshold":0.9},"id":"CVE-2022-3976-15ec8953","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/server/mms_file_service.c","function":"mmsServer_handleFileDeleteRequest"},"deprecated":false,"digest":{"function_hash":"162115703815135026413522969739345308385","length":1460},"id":"CVE-2022-3976-1f43b18a","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["229358991666389058954830719656125670740","147212652352324340210762946669751203805","299531989231149053797323255909641322396","80673827942394153471545336781346018836","286762767805854357410798255173649829042","221536359726700055605792780283429788364","51662105790354614603966864700101424074","5082633361570790104478820905111652921","233666192294952239679839272431655104753","241641415370620945572654988289597753599","326943843315876809007156177839829793947","273429305434197865891357598204211614776","67236736834845401426654326194984856738","308106787509207122804901594011828458187","6601602505727453601956790726057542498","318321880670741254436947611273978793731","195123742202636472447879587092889484376","91874448640856872642835586958135645311"],"threshold":0.9},"id":"CVE-2022-3976-25a6b6db","signature_type":"Line","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/server/mms_file_service.c"}},{"deprecated":false,"digest":{"function_hash":"38197448869572418463129693898794271316","length":1233},"id":"CVE-2022-3976-79a9dcb1","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/server/mms_file_service.c","function":"createFileDirectoryResponse"}},{"target":{"file":"src/mms/iso_mms/server/mms_file_service.c","function":"mmsServer_handleFileRenameRequest"},"deprecated":false,"digest":{"function_hash":"2271010013147768251710908041264792739","length":1541},"id":"CVE-2022-3976-7f0a47d6","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f"},{"target":{"file":"src/mms/iso_mms/server/mms_file_service.c","function":"mmsServer_handleFileOpenRequest"},"deprecated":false,"digest":{"function_hash":"194769728266570537677738207756149215595","length":1581},"id":"CVE-2022-3976-9000e05b","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f"},{"target":{"file":"src/mms/inc_private/mms_common_internal.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["119386288191749030430666379288261375351","188581953362773416777316970779401284947","272264184007048375129626428044990583278"]},"id":"CVE-2022-3976-9bded309","signature_type":"Line","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f"},{"deprecated":false,"digest":{"function_hash":"100441096859939978190827245877250806915","length":794},"id":"CVE-2022-3976-abaecd82","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/common/mms_common_msg.c","function":"mmsMsg_parseFileName"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/common/mms_common_msg.c"},"deprecated":false,"digest":{"line_hashes":["108884549358632811717921135091764864429","211634442277622735553412454101757755588","5154128558624870380717173656875471681","56829703115176708901121380892372287389","126759108595578118946961972021913401879","144466995982535924664252223741287911632","100610365172104561464091872389485472892"],"threshold":0.9},"id":"CVE-2022-3976-d76a44c2"},{"digest":{"function_hash":"120828112650938684460814195379241895680","length":1554},"id":"CVE-2022-3976-e206f01d","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/10622ba36bb3910c151348f1569f039ecdd8786f","target":{"file":"src/mms/iso_mms/client/mms_client_files.c","function":"mmsClient_handleFileOpenRequest"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"}]}