← back
CVE-2024-34057

CVE-2024-34057

CVSS 8.2 HIGHEPSS 0.4%CWE-120
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Sep 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
n/a · n/a
References
https://trianglemicroworks.com/products/source-code-libraries/iec-61850-scl-pages/what%27s-newhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-256-16