A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1236 | Exploit Third Party Advisory |
Configurations
History
31 Aug 2021, 18:48
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:mz-automation:lib60870:2.2.0:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CWE | CWE-617 | |
References | (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2021-1236 - Exploit, Third Party Advisory |
25 Aug 2021, 19:21
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-08-25 19:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-21778
Mitre link : CVE-2021-21778
CVE.ORG link : CVE-2021-21778
JSON object : View
Products Affected
mz-automation
- lib60870
CWE
CWE-617
Reachable Assertion