VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 11, 2022· Updated Apr 16, 2025

CVE-2022-38138

CVE-2022-38138

Description

The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier) and 60870-6 (ICCP/TASE.2) Library (Any client or server using a C++ language library with a version number of 4.4.3 or earlier) are vulnerable to access given to a small number of uninitialized pointers within their code. This could allow an attacker to target any client or server using the affected libraries to cause a denial-of-service condition.

Affected products

4
  • Trianglemicroworks/IEC 61850 Libraryllm-create2 versions
    <=11.2.0 (C language), <=5.0.1 (C++, C#, Java)+ 1 more
    • (no CPE)range: <=11.2.0 (C language), <=5.0.1 (C++, C#, Java)
    • (no CPE)range: Any client or server using the C language library with a version number of 11.2.0 or earlier
  • Trianglemicroworks/60870-6 (ICCP/TASE.2) Libraryllm-create2 versions
    <=4.4.3 (C++)+ 1 more
    • (no CPE)range: <=4.4.3 (C++)
    • (no CPE)range: Any client or server using a C++ language library with a version number of 4.4.3 or earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.