CVE-2024-45971
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 15, 2024
CWE ID 120
Summary
CVE-2024-45971 is a newly disclosed vulnerability affecting the MMS Client in MZ Automation LibIEC61850. This issue permits a malicious server to induce stack-based buffer overflows through crafted MMS IdentifyResponse messages. Successful exploitation can lead to arbitrary code execution and potential system compromise. Organizations using this software are advised to update to a patched version as soon as available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.