Vulnerabilities > CVE-2019-16510 - Use After Free vulnerability in Mz-Automation Libiec61850

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
mz-automation
CWE-416
NVD
Published: 2019-09-19
Updated: 2019-09-19

Summary

libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose.

Vulnerable Configurations

Part Description Count
Application
Mz-Automation
12

Common Weakness Enumeration (CWE)

References