What’s Vulnerable › Vulnerabilities

CVE-2024-34057

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-18 · updated 2026-06-17
• Weakness: CWE-120

Description

Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.

Affected products

• Siemens AG SICAM WEB firmware for SICAM A8000 RTUs: before 05.30 — fixed in 05.30
• Siemens Sicam Egs Firmware: before 05.30 — fixed in 05.30
• Siemens Sicam S8000: before 05.30 — fixed in 05.30
• Siemens Sicam Scc Firmware: before 10.0 — fixed in 10.0
• Siemens Sitipe At: all versions
• Trianglemicroworks Iec 61850 Source Code Library: before 12.2.0 — fixed in 12.2.0

How to fix

Upgrade to a fixed version: Siemens AG SICAM WEB firmware for SICAM A8000 RTUs 05.30; Siemens Sicam Egs Firmware 05.30; Siemens Sicam S8000 05.30; Siemens Sicam Scc Firmware 10.0; Trianglemicroworks Iec 61850 Source Code Library 12.2.0. Check the vendor advisory for mitigations.

References

• https://trianglemicroworks.com/products/source-code-libraries/iec-61850-scl-pages/what%27s-new
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-16

Get alerted when CVE-2024-34057 or the next vulnerability affects your stack