CVE-2019-6136: High severity mz automation libiec61850 vulnerability
Published Jan 11, 2019
·Updated
An issue has been found in libIEC61850 v1.3.1. EthernetsetProtocolFilter in hal/ethernet/linux/ethernetlinux.c has a SEGV, as demonstrated by svsubscriberexample.c and svsubscriber.c.
Affected Software
1 affected component
mz-automation libiec61850=1.3.1
Event History
Jan 11, 2019
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6136?
CVE-2019-6136 is classified as a high-severity vulnerability due to the potential for a segmentation fault.
2
How do I fix CVE-2019-6136?
To fix CVE-2019-6136, upgrade libIEC61850 to version 1.3.2 or later.
3
What software is affected by CVE-2019-6136?
CVE-2019-6136 affects libIEC61850 version 1.3.1.
4
What type of vulnerability is CVE-2019-6136?
CVE-2019-6136 is a segmentation fault vulnerability found in the Ethernet_setProtocolFilter function.
5
Can CVE-2019-6136 be exploited remotely?
Yes, CVE-2019-6136 can be exploited remotely if an attacker can send specific input to the affected software.