Mz-automation Lib60870 — known CVE vulnerabilities

Every CVE whose affected-product data names Mz-automation Lib60870, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-6137 — CVSS 7.5 (high): An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference.
• CVE-2021-21778 — CVSS 7.5 (high): A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially…
• CVE-2021-45773 — CVSS 7.5 (high): A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a…
• CVE-2023-23205 — CVSS 5.5 (medium): An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c…