CyberRota Analysis
AI-GeneratedA vulnerability exists in systems processing IEC 60870-5-104 I-frames, where a specially crafted message with an inflated object count can lead to a buffer overflow in the TestCommand_getFromBuffer function. This can potentially allow an attacker to manipulate memory, leading to unexpected behavior or crashes. Organizations utilizing affected products that handle IEC 60870-5-104 communications should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.