Vulnerability Details : CVE-2018-19185
Potential exploit
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector.
Vulnerability category: OverflowMemory Corruption
Products affected by CVE-2018-19185
- cpe:2.3:a:mz-automation:libiec61850:1.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-19185
0.74%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 81 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-19185
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2018-19185
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-19185
-
https://github.com/fouzhe/security/tree/master/libiec61850#another-heap-buffer-overflow-in-function-berencoder_encodeoctetstring
security/libiec61850 at master · fouzhe/security · GitHubExploit;Third Party Advisory
-
https://github.com/mz-automation/libiec61850/issues/87
Another heap buffer overflow in function BerEncoder_encodeOctetString · Issue #87 · mz-automation/libiec61850 · GitHubExploit;Third Party Advisory
Jump to