CVE-2024-34057
Severity Score
8.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-04-30 CVE Reserved
- 2024-09-18 CVE Published
- 2024-09-19 CVE Updated
- 2024-09-26 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://trianglemicroworks.com/products/source-code-libraries/iec-61850-scl-pages/what%27s-new | ||
| https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-16 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Sicam S8000 Search vendor "Siemens" for product "Sicam S8000" | * | - |
Affected
| ||||||
| Siemens Search vendor "Siemens" | Sitipe At Search vendor "Siemens" for product "Sitipe At" | * | - |
Affected
| ||||||
| Trianglemicroworks Search vendor "Trianglemicroworks" | Iec 61850 Client Source Code Library Search vendor "Trianglemicroworks" for product "Iec 61850 Client Source Code Library" | * | - |
Affected
| ||||||
| Trianglemicroworks Search vendor "Trianglemicroworks" | Iec 61850 Source Code Library Search vendor "Trianglemicroworks" for product "Iec 61850 Source Code Library" | * | - |
Affected
| ||||||
| Siemens Search vendor "Siemens" | Sicam A8000 Firmware Search vendor "Siemens" for product "Sicam A8000 Firmware" | * | - |
Affected
| ||||||
| Siemens Search vendor "Siemens" | Sicam Egs Firmware Search vendor "Siemens" for product "Sicam Egs Firmware" | * | - |
Affected
| ||||||
| Siemens Search vendor "Siemens" | Sicam Scc Firmware Search vendor "Siemens" for product "Sicam Scc Firmware" | * | - |
Affected
| ||||||