https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:17:39.490421+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05635 bdu:2022-05635 2026-10-03T05:17:39.493659+00:00 bdu:2022-05635 https://cve.radiocsirt.org/vuln/euvd-2026-230838 EUVD-2026-230838 2026-10-03T05:17:39.493695+00:00 EUVD-2026-230838 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2970 fkie_cve-2022-2970 2026-10-03T05:17:39.493732+00:00

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-h3j4-vfr6-r3jp GHSA-h3j4-vfr6-r3jp 2026-10-03T05:17:39.493795+00:00

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2022-2970 gsd-2022-2970 2026-10-03T05:17:39.493815+00:00 gsd-2022-2970 https://cve.radiocsirt.org/vuln/icsa-22-251-01 ICSA-22-251-01 — MZ Automation libIEC61850 2026-10-03T05:17:39.493827+00:00

The affected product does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code.CVE-2022-2970 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The affected product is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code. 3.2.3 ACCESS OF RESOURCE USING INCOMPATIBLE TYPE ('TYPE CONFUSION') CWE 843. The affected product accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload.CVE-2022-2972 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The affected product uses a NULL pointer in certain situations. which could allow an attacker to crash the server.CVE-2022-2973 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).