Critical severity9.8NVD Advisory· Published Nov 15, 2024· Updated Jun 17, 2026

CVE-2024-45970

Description

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mz Automation/Libiec618503 versions
cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*range: <1.6.0
- (no CPE)
- (no CPE)range: < ac925fae8e281ac6defcd630e9dd756264e9c5bc

Patches

Vulnerability mechanics

References

github.com/mz-automation/libiec61850/commit/ac925fae8e281ac6defcd630e9dd756264e9c5bcnvdPatch
encs.eu/news/critical-security-vulnerabilities-discovered-in-mz-automations-mms-client/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000