CVE-2022-3976 | MZ Automation libiec61850 up to 1.4 MMS File Services mms_client_files.c filename path traversal (EUVD-2022-43306)

A vulnerability classified as critical has been found in MZ Automation libiec61850 up to 1.4. Affected by this issue is some unknown functionality of the file src/mms/iso_mms/client/mms_client_files.c of the component MMS File Services. Performing a manipulation of the argument filename results in path traversal. This vulnerability is known as CVE-2022-3976. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.