{"id":"CVE-2024-45970","details":"Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message.","modified":"2026-08-12T14:52:14.665644Z","published":"2024-11-15T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45970.json","unresolved_ranges":[{"extracted_events":[{"introduced":"LibIEC61850"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45970.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45970"},{"type":"FIX","url":"https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mz-automation/libiec61850","events":[{"introduced":"0"},{"fixed":"519b0208cc79d1af09d5ca40fb9ad1fd93822e93"},{"fixed":"ac925fae8e281ac6defcd630e9dd756264e9c5bc"}],"database_specific":{"cpe":"cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.6.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.4.1","v1.4.0","v1.2.0","v1.3.0","v1.2.2","v1.2.1","v1.1","v1.0.1","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45970.json","vanir_signatures_modified":"2026-08-12T14:52:14Z","vanir_signatures":[{"digest":{"function_hash":"303879781645442864602887848502166107065","length":612},"id":"CVE-2024-45970-04b7f047","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc","target":{"function":"parseFileAttributes","file":"src/mms/iso_mms/client/mms_client_files.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["307511949982169214882580224381524218431","10328641350445122611015829559859122319","156528089482707069043509408737738883259","111828210124929090522473056631811100548","273358915731973005143320774525099221099","230418070759551756736827622160518119504","107497782957833197931359675844746462970","185192457619609961665369183081648911281","320378584721608430663179230857407412054","8812667395594147204254315660381958843","126886765889216431243024891530522974235","3968196394155706714010092786521046588","68539940616786142789724218014687724654","59604605285145441903169955632130004121","122626917515786234905172914050192021898","3968196394155706714010092786521046588","68539940616786142789724218014687724654","246967719078801949673011295946722489062","277155798881339660700122737191282243666","219228220688516715011591658190385254159","184079847354137855071414883259699545590"],"threshold":0.9},"id":"CVE-2024-45970-0df03da7","signature_type":"Line","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc","target":{"file":"src/mms/iso_mms/client/mms_client_files.c"}},{"digest":{"function_hash":"103170009725023122214798347000222996816","length":1131},"id":"CVE-2024-45970-818577b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bc","target":{"file":"src/mms/iso_mms/client/mms_client_files.c","function":"parseDirectoryEntry"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}