Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
| Link | Tags |
|---|---|
| https://trianglemicroworks.com/products/source-code-libraries/iec-61850-scl-pages/what%27s-new | release notes |
| https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-16 | third party advisory us government resource |