4 CISA ICS advisories for MZ Automation in the last tracking window, 0 flagged as relevant to oil & gas. Newest first.
CISA reports 2 vulnerabilities in MZ Automation lib60870. Weakness type: Out-of-bounds Read. Successful exploitation of these vulnerabilities could crash the device being accessed. Highest CVSS v3 score: 6.5 (Medium), exploitable over the network.
CISA reports 8 vulnerabilities in MZ Automation libiec61850. Weakness type: Out-of-bounds Read. Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the device. Highest CVSS v3 score: 7.5 (High), exploitable over the network.
CISA reports 1 vulnerability in MZ Automation lib60870. Weakness type: Out-of-bounds Read. Successful exploitation of this vulnerability could cause the parsing process to crash, which will cause a denial of service. Highest CVSS v3 score: 8.2 (High), exploitable over the network.
CISA reports 4 vulnerabilities in MZ Automation libIEC61850. Weakness types: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Improper Handling of Syntactically Invalid Structure (+1 more). Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critica…
Every week: the new ICS advisories that touch oil & gas gear, what they mean, and what to do. Free.
TODO: signup form not connected to a provider yet