Lucene search
MitreCVE-2024-34057HistorySep 18, 2024 - 7:15 p.m.
CVE-2024-34057
2024-09-1819:15:40
CWE-120
mitre
web.nvd.nist.gov
23
triangle microworks
iec 61850
buffer overflow
denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.001
Percentile
17.7%
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
Affected configurations
Node
trianglemicroworksiec_61850_source_code_libraryRange<12.2.0
Node
siemenssicam_a8000_firmwareRange<05.30
siemenssicam_a8000Match-
Node
siemenssicam_scc_firmwareRange<10.0
siemenssicam_sccMatch-
Node
siemenssicam_egs_firmwareRange<05.30
siemenssicam_egsMatch-
Node
siemenssicam_s8000Range<05.30
ORsiemenssitipe_at
| Vendor | Product | Version | CPE |
|---|---|---|---|
| trianglemicroworks | iec_61850_source_code_library | * | cpe:2.3:a:trianglemicroworks:iec_61850_source_code_library:*:*:*:*:*:*:*:* |
| siemens | sicam_a8000_firmware | * | cpe:2.3:o:siemens:sicam_a8000_firmware:*:*:*:*:*:*:*:* |
| siemens | sicam_a8000 | - | cpe:2.3:h:siemens:sicam_a8000:-:*:*:*:*:*:*:* |
| siemens | sicam_scc_firmware | * | cpe:2.3:o:siemens:sicam_scc_firmware:*:*:*:*:*:*:*:* |
| siemens | sicam_scc | - | cpe:2.3:h:siemens:sicam_scc:-:*:*:*:*:*:*:* |
| siemens | sicam_egs_firmware | * | cpe:2.3:o:siemens:sicam_egs_firmware:*:*:*:*:*:*:*:* |
| siemens | sicam_egs | - | cpe:2.3:h:siemens:sicam_egs:-:*:*:*:*:*:*:* |
| siemens | sicam_s8000 | * | cpe:2.3:a:siemens:sicam_s8000:*:*:*:*:*:*:*:* |
| siemens | sitipe_at | * | cpe:2.3:a:siemens:sitipe_at:*:*:*:*:*:*:*:* |
Related
ics
ics
Siemens Third Party Component in SICAM and SITIPE Products
2024-09-12 12:00:00
nvd
nvd
CVE-2024-34057
2024-09-18 19:15:40
vulnrichment
vulnrichment
CVE-2024-34057
2024-09-18 00:00:00
nessus
nessus
cvelist
cvelist
CVE-2024-34057
2024-09-18 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.001
Percentile
17.7%
Related for CVE-2024-34057