CVE-2022-3976 An exploit has been found in MZ Automation 1.4 and classified as critical. This vulnerability affects MMS File Services.

CVE-2022-3976 An exploit has been found in MZ Automation 1.4 and classified as critical. This vulnerability affects MMS File Services.

Another vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/iso_mms/client/mms_client_files.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal. Upgrading to version 1.5 is able to address this issue. The name of the patch is 9a9e78932c3bc1d2764a5d8c83a0cf3c3b75ad3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213557.

Furthermore, another vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/iso_mms/client/mms_client_files.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal. Upgrading to version 1.5 is able to address this issue. The name of the patch is a5c5b5e5d5a5a8d977b7003a3a5bd5d0c8f50e5. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213558.

Furthermore

MZ Automation Libtiec-6018D:

Product and Affected Components
-CVE-2022-3976: An unknown vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/iso_mms/client/mms_client_files.c of the component MMS File Services. The manipulation of the argument filename leads to path traversal. Upgrading to version 1.5 is able to address this issue. The name of the patch is 9a9e78932c3bc1d2764a5d8c83a0cf3c3b75ad3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213557.-
-CVE-2022-3977: An unknown vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. This vulnerability affects unknown code of the file src/mms/iso_mms/client/webui2xlcombo_filebrowser_spsystemviewer_spsystemviewerwizardcopyformactionshortcutspart1of2of2of2of2of2of2of2of2of2copypasteforwizardcopyformactionshortcutspart1of2of3ofthetwoformUploadSPSystemViewerPageSpecificationPageSpec

References

Subscribe to CVE.news
Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.
jamie@example.com
Subscribe