CyberRota Analysis
AI-GeneratedA vulnerability exists in the parsing of IEC 60870-5-104 I-frames, where an attacker can exploit a crafted message with an excessive object count, leading to a buffer overflow. This could allow unauthorized access to memory, potentially resulting in data corruption or application crashes. Organizations utilizing systems that process IEC 60870-5-104 protocols should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.