Skip to main content

Mz Automation

45 CVEs vendor

Monthly

CVE-2026-19259 Aug 08, 06:00 LOW POC Monitor

Heap-based buffer overflow in MZ Automation libiec61850 up to version 1.6.1 allows a local attacker with low privileges to corrupt heap memory by supplying a crafted GetNamedVariableListAttributesResponse itemId argument to the MmsMapping_varAccessSpecToObjectReference function in the MMS Protocol Workflow. A public proof-of-concept exploit has been released and is available for download. The vulnerability has not yet been patched; the project was notified via GitHub issue #599 but has not responded at time of analysis. No active exploitation is confirmed by CISA KEV, though the publicly available PoC meaningfully elevates near-term risk.

Buffer Overflow Heap Overflow Libiec61850 Mz Automation
NVD VulDB GitHub
CVSS 4.0
1.9
EPSS
0.1%
CVE-2026-18583 Aug 03, 04:15 MEDIUM POC PATCH This Month

Out-of-bounds read in mz-automation libiec61850 up to version 1.6.1 allows remote unauthenticated attackers to crash the IEC 61850 MMS server process and potentially leak heap or stack memory contents by sending a crafted MMS DataSet access request. The root cause is unconstrained string copy operations in the checkDataSetAccess function, now confirmed fixed in v1.6.2 via bounded copy with a 129-byte limit. A public exploit has been disclosed; however, this vulnerability is not listed in CISA KEV and the CVSS 4.0 score of 6.9 (Medium) reflects limited impact scope confined to availability of the vulnerable system.

Buffer Overflow Information Disclosure Libiec61850 Mz Automation
NVD VulDB GitHub
CVSS 4.0
5.5
EPSS
0.5%
CVE-2026-18582 Aug 03, 01:15 MEDIUM POC PATCH This Month

Remote unauthenticated crash in mz-automation libiec61850 1.6.0-1.6.1 allows a network attacker to terminate an IEC 61850 MMS server by supplying an oversized Report ID string to the Report Control Block write handler, triggering a free of non-heap memory (CWE-590). No authentication or user interaction is required per the CVSS 4.0 vector (PR:N/UI:N/AV:N), and a public proof-of-concept exploit exists at the referenced GitHub issue. Active exploitation has not been confirmed by CISA KEV, but the combination of a public PoC and trivial exploitation path elevates practical risk in operational technology environments where IEC 61850 server continuity is safety-critical.

Information Disclosure Libiec61850 Mz Automation
NVD VulDB GitHub
CVSS 4.0
5.5
EPSS
0.5%
CVE-2026-16002 Jul 23, 20:57 HIGH CISA Act Now

Denial-of-service in MZ Automation's lib60870, an open-source IEC 60870-5-101/104 telecontrol protocol library used in ICS/SCADA systems, allows remote attackers to crash the message-parsing process via a malformed protocol frame that triggers an out-of-bounds read (CWE-125). The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) indicates unauthenticated network exploitation with high availability impact and limited confidentiality exposure. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.

Buffer Overflow Denial Of Service Information Disclosure Lib60870 Mz Automation
NVD VulDB
CVSS 4.0
8.8
EPSS
0.3%
CVE-2026-50032 Jul 23, 20:53 HIGH CISA Act Now

Denial of service in MZ Automation's libiec61850 library allows a network-adjacent attacker to crash an IEC 61850 MMS server by sending a specially crafted WriteRequest whose listOfData field is empty, triggering a NULL pointer dereference (CWE-476) in the Write Named Variable List handler. Any device or application embedding the affected library as an MMS server - commonly protection relays, RTUs, gateways, and SCADA front-ends in electric-power and industrial environments - is exposed. Reported through CISA ICS-CERT (advisory ICSA-26-204-06) with no public exploit identified at time of analysis and no CISA KEV listing.

Denial Of Service Null Pointer Dereference Libiec61850 Mz Automation
NVD VulDB
CVSS 4.0
8.7
EPSS
0.3%
CVE-2026-50103 Jul 23, 20:50 HIGH CISA Act Now

Denial of service in MZ Automation's libiec61850 lets a network-adjacent attacker crash any application subscribing to GOOSE traffic by transmitting a single crafted L2 GOOSE or R-GOOSE frame carrying a malformed TLV. Because the fault lives in the shared parser used by both the Layer-2 and routable variants, both transport modes are affected, and successful exploitation produces a NULL pointer dereference that terminates the subscriber process. No public exploit identified at time of analysis and the issue is not listed in CISA KEV; the CVSS 4.0 base score is 7.1 with availability-only impact.

Denial Of Service Libiec61850 Mz Automation
NVD VulDB
CVSS 4.0
7.1
EPSS
0.2%
CVE-2026-49035 Jul 23, 20:48 CRITICAL CISA Emergency

Remote code execution in MZ Automation's libiec61850 IEC 61850 library is possible via a crafted MMS Initiate request that triggers a heap-based buffer overflow (CWE-122); RCE was demonstrated on hosts with ASLR disabled, while ASLR-enabled deployments face memory corruption or denial of service. Any device or application embedding this library and exposing the MMS/TCP (typically port 102) service to attacker-reachable networks is affected. Reported through CISA ICS-CERT (ICSA-26-204-06); no public exploit identified at time of analysis and no EPSS/KEV signal is present in the source data.

RCE Buffer Overflow Denial Of Service Heap Overflow Libiec61850 +1
NVD VulDB
CVSS 4.0
9.2
EPSS
0.4%
CVE-2026-50039 Jul 23, 20:32 HIGH CISA Act Now

Denial of service in MZ Automation's libiec61850 library allows remote unauthenticated attackers to corrupt memory by sending a crafted Read Request, triggering a stack-based buffer overflow (CWE-121). The flaw affects the IEC 61850 MMS server implementation used in power-grid and industrial automation devices, and was disclosed via a CISA ICS advisory (ICSA-26-204-06). No public exploit is identified at time of analysis, and the vendor CVSS 4.0 vector scores only availability impact, indicating a service crash rather than confirmed code execution.

Buffer Overflow Stack Overflow Libiec61850 Mz Automation
NVD VulDB
CVSS 4.0
8.7
EPSS
0.3%
CVE-2024-45971 Nov 15, 19:15 CRITICAL PATCH Act Now

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-45970 Nov 15, 19:15 CRITICAL PATCH Act Now

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-36702 Jun 11, 19:16 HIGH POC This Week

libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub VulDB
CVSS 3.1
7.4
EPSS
0.3%
CVE-2024-28286 Mar 21, 02:52 HIGH POC This Week

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-26529 Mar 13, 08:15 HIGH POC This Week

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2024-25366 Feb 20, 16:15 MEDIUM POC This Month

Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Integer Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
6.2
EPSS
0.9%
CVE-2023-27772 Apr 13, 18:15 HIGH POC PATCH This Week

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
7.5
EPSS
0.9%
CVE-2023-23205 Feb 24, 16:15 MEDIUM POC This Month

An issue was discovered in lib60870 v2.3.2. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Lib60870 Mz Automation
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-3976 Nov 13, 14:15 HIGH PATCH This Week

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Libiec61850 Mz Automation
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
0.5%
CVE-2022-2973 Sep 23, 16:15 HIGH This Week

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 Mz Automation
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-2972 Sep 23, 16:15 CRITICAL Act Now

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Libiec61850 Mz Automation
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2022-2971 Sep 23, 16:15 HIGH This Week

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Memory Corruption Libiec61850 Mz Automation
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-2970 Sep 23, 16:15 CRITICAL Act Now

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Libiec61850 Mz Automation
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-21159 Apr 15, 16:15 HIGH POC PATCH This Week

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
7.5
EPSS
1.8%
CVE-2022-1302 Apr 12, 08:15 HIGH This Week

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libiec61850 Mz Automation
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2021-21778 Aug 25, 19:15 HIGH POC This Week

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Lib60870 Mz Automation
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2020-15158 Aug 26, 18:15 CRITICAL PATCH Act Now

In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer underflow will happen leading to heap buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
9.8
EPSS
2.0%
CVE-2020-7054 Jan 14, 21:15 HIGH POC This Week

MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
8.8
EPSS
1.1%
CVE-2019-19958 Dec 24, 22:15 MEDIUM POC This Month

In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2019-19957 Dec 24, 22:15 MEDIUM POC This Month

In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufPos and elementLength. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2019-19944 Dec 23, 19:15 MEDIUM POC This Month

In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2019-19931 Dec 23, 03:15 HIGH POC This Week

In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
8.8
EPSS
1.3%
CVE-2019-19930 Dec 23, 03:15 MEDIUM POC This Month

In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Integer Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
6.5
EPSS
1.1%
CVE-2019-16510 Sep 19, 16:15 HIGH POC This Week

libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
7.5
EPSS
1.4%
CVE-2019-1010300 Jul 15, 18:15 HIGH POC This Week

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.3%
CVE-2019-6719 Jan 23, 22:29 HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.5%
CVE-2019-6138 Jan 11, 17:29 HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.5%
CVE-2019-6137 Jan 11, 17:29 HIGH POC This Week

An issue was discovered in lib60870 2.1.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Lib60870 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.5%
CVE-2019-6136 Jan 11, 17:29 HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.5%
CVE-2019-6135 Jan 11, 17:29 HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.7%
CVE-2018-19185 Nov 12, 05:29 CRITICAL POC Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
9.8
EPSS
2.1%
CVE-2018-19122 Nov 09, 11:29 MEDIUM POC This Month

An issue has been found in libIEC61850 v1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
4.3
EPSS
1.2%
CVE-2018-19121 Nov 09, 11:29 MEDIUM POC This Month

An issue has been found in libIEC61850 v1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
4.3
EPSS
1.2%
CVE-2018-19093 Nov 07, 19:29 HIGH POC This Week

An issue has been found in libIEC61850 v1.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Heap Overflow Libiec61850 Mz Automation
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
CVE-2018-18957 Nov 05, 22:29 CRITICAL POC THREAT Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub Exploit-DB
CVSS 3.0
9.8
EPSS
11.6%
CVE-2018-18937 Nov 05, 09:29 HIGH POC This Week

An issue has been found in libIEC61850 v1.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
7.5
EPSS
1.7%
CVE-2018-18834 Oct 30, 06:29 CRITICAL POC Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
9.8
EPSS
2.1%
EPSS 0% CVSS 1.9
LOW POC Monitor

Heap-based buffer overflow in MZ Automation libiec61850 up to version 1.6.1 allows a local attacker with low privileges to corrupt heap memory by supplying a crafted GetNamedVariableListAttributesResponse itemId argument to the MmsMapping_varAccessSpecToObjectReference function in the MMS Protocol Workflow. A public proof-of-concept exploit has been released and is available for download. The vulnerability has not yet been patched; the project was notified via GitHub issue #599 but has not responded at time of analysis. No active exploitation is confirmed by CISA KEV, though the publicly available PoC meaningfully elevates near-term risk.

Buffer Overflow Heap Overflow Libiec61850 +1
NVD VulDB GitHub
EPSS 0% CVSS 5.5
MEDIUM POC PATCH This Month

Out-of-bounds read in mz-automation libiec61850 up to version 1.6.1 allows remote unauthenticated attackers to crash the IEC 61850 MMS server process and potentially leak heap or stack memory contents by sending a crafted MMS DataSet access request. The root cause is unconstrained string copy operations in the checkDataSetAccess function, now confirmed fixed in v1.6.2 via bounded copy with a 129-byte limit. A public exploit has been disclosed; however, this vulnerability is not listed in CISA KEV and the CVSS 4.0 score of 6.9 (Medium) reflects limited impact scope confined to availability of the vulnerable system.

Buffer Overflow Information Disclosure Libiec61850 +1
NVD VulDB GitHub
EPSS 0% CVSS 5.5
MEDIUM POC PATCH This Month

Remote unauthenticated crash in mz-automation libiec61850 1.6.0-1.6.1 allows a network attacker to terminate an IEC 61850 MMS server by supplying an oversized Report ID string to the Report Control Block write handler, triggering a free of non-heap memory (CWE-590). No authentication or user interaction is required per the CVSS 4.0 vector (PR:N/UI:N/AV:N), and a public proof-of-concept exploit exists at the referenced GitHub issue. Active exploitation has not been confirmed by CISA KEV, but the combination of a public PoC and trivial exploitation path elevates practical risk in operational technology environments where IEC 61850 server continuity is safety-critical.

Information Disclosure Libiec61850 Mz Automation
NVD VulDB GitHub
EPSS 0% CVSS 8.8
HIGH Act Now

Denial-of-service in MZ Automation's lib60870, an open-source IEC 60870-5-101/104 telecontrol protocol library used in ICS/SCADA systems, allows remote attackers to crash the message-parsing process via a malformed protocol frame that triggers an out-of-bounds read (CWE-125). The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) indicates unauthenticated network exploitation with high availability impact and limited confidentiality exposure. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.

Buffer Overflow Denial Of Service Information Disclosure +2
NVD VulDB
EPSS 0% CVSS 8.7
HIGH Act Now

Denial of service in MZ Automation's libiec61850 library allows a network-adjacent attacker to crash an IEC 61850 MMS server by sending a specially crafted WriteRequest whose listOfData field is empty, triggering a NULL pointer dereference (CWE-476) in the Write Named Variable List handler. Any device or application embedding the affected library as an MMS server - commonly protection relays, RTUs, gateways, and SCADA front-ends in electric-power and industrial environments - is exposed. Reported through CISA ICS-CERT (advisory ICSA-26-204-06) with no public exploit identified at time of analysis and no CISA KEV listing.

Denial Of Service Null Pointer Dereference Libiec61850 +1
NVD VulDB
EPSS 0% CVSS 7.1
HIGH Act Now

Denial of service in MZ Automation's libiec61850 lets a network-adjacent attacker crash any application subscribing to GOOSE traffic by transmitting a single crafted L2 GOOSE or R-GOOSE frame carrying a malformed TLV. Because the fault lives in the shared parser used by both the Layer-2 and routable variants, both transport modes are affected, and successful exploitation produces a NULL pointer dereference that terminates the subscriber process. No public exploit identified at time of analysis and the issue is not listed in CISA KEV; the CVSS 4.0 base score is 7.1 with availability-only impact.

Denial Of Service Libiec61850 Mz Automation
NVD VulDB
EPSS 0% CVSS 9.2
CRITICAL Emergency

Remote code execution in MZ Automation's libiec61850 IEC 61850 library is possible via a crafted MMS Initiate request that triggers a heap-based buffer overflow (CWE-122); RCE was demonstrated on hosts with ASLR disabled, while ASLR-enabled deployments face memory corruption or denial of service. Any device or application embedding this library and exposing the MMS/TCP (typically port 102) service to attacker-reachable networks is affected. Reported through CISA ICS-CERT (ICSA-26-204-06); no public exploit identified at time of analysis and no EPSS/KEV signal is present in the source data.

RCE Buffer Overflow Denial Of Service +3
NVD VulDB
EPSS 0% CVSS 8.7
HIGH Act Now

Denial of service in MZ Automation's libiec61850 library allows remote unauthenticated attackers to corrupt memory by sending a crafted Read Request, triggering a stack-based buffer overflow (CWE-121). The flaw affects the IEC 61850 MMS server implementation used in power-grid and industrial automation devices, and was disclosed via a CISA ICS advisory (ICSA-26-204-06). No public exploit is identified at time of analysis, and the vendor CVSS 4.0 vector scores only availability impact, indicating a service crash rather than confirmed code execution.

Buffer Overflow Stack Overflow Libiec61850 +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
EPSS 0% CVSS 7.4
HIGH POC This Week

libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 +1
NVD GitHub VulDB
EPSS 1% CVSS 7.5
HIGH POC This Week

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 6.2
MEDIUM POC This Month

Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Integer Overflow +2
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM POC This Month

An issue was discovered in lib60870 v2.3.2. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Lib60870 Mz Automation
NVD GitHub
EPSS 0% CVSS 8.8
HIGH PATCH This Week

A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Libiec61850 Mz Automation
NVD GitHub VulDB
EPSS 1% CVSS 7.5
HIGH This Week

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 +1
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD
EPSS 1% CVSS 7.5
HIGH This Week

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Memory Corruption Libiec61850 +1
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD
EPSS 2% CVSS 7.5
HIGH POC PATCH This Week

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 7.5
HIGH This Week

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Libiec61850 Mz Automation
NVD
EPSS 1% CVSS 7.5
HIGH POC This Week

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Lib60870 Mz Automation
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer underflow will happen leading to heap buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 8.8
HIGH POC This Week

MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC This Month

In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC This Month

In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufPos and elementLength. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC This Month

In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 8.8
HIGH POC This Week

In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC This Month

In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Integer Overflow Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption +2
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption +2
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue was discovered in lib60870 2.1.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Lib60870 +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
EPSS 2% CVSS 7.5
HIGH POC This Week

An issue has been found in libIEC61850 v1.3.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Libiec61850 Mz Automation
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC This Month

An issue has been found in libIEC61850 v1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC This Month

An issue has been found in libIEC61850 v1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 +1
NVD GitHub
EPSS 2% CVSS 7.5
HIGH POC This Week

An issue has been found in libIEC61850 v1.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Heap Overflow Libiec61850 +1
NVD GitHub
EPSS 12% CVSS 9.8
CRITICAL POC THREAT Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 +1
NVD GitHub Exploit-DB
EPSS 2% CVSS 7.5
HIGH POC This Week

An issue has been found in libIEC61850 v1.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Libiec61850 +1
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy