Priority HIGH 77
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session.
MZ Automation
Records65All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9
Exploited now
MZ Automation records in CISA KEVNo MZ Automation vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
65 records
Priority HIGH 72
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session.
Priority HIGH 72
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session.
TI-2024-18824 CVE-2024-28286 · GHSA-94qh-v8fx-3f78
In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the…
Priority HIGH 72
In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c.
TI-2022-05561 CVE-2022-21159 · GHSA-wc26-f4h3-2vxx
Infinite loop in MZ Automation libiec61850
Priority HIGH 72
A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0.
TI-2026-45011 CVE-2026-63033 · GHSA-gqw6-mwcf-3xwh
MZ Automation lib60870 Out-of-bounds Read
Priority HIGH 70
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.
TI-2026-44285 CVE-2026-61893 · GHSA-gfjj-vr9m-mw6f
MZ Automation lib60870 Out-of-bounds Read
Priority HIGH 70
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.
TI-2026-15229 CVE-2026-18583 · GHSA-948g-pq52-gmvq
mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
Priority HIGH 70
A weakness has been identified in mz-automation libiec61850 up to 1.6.1.
TI-2026-15228 CVE-2026-18582 · GHSA-vj8r-wqrg-59qf
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
Priority HIGH 70
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1.
TI-2024-24382 CVE-2024-36702 · GHSA-79gc-6j6c-pf3r
libiec61850 v1.5 was discovered to contain a heap overflow via the…
Priority HIGH 68
libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.
Priority MEDIUM 63
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session.
Priority MEDIUM 63
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session.
TI-2023-09169 CVE-2023-23205 · GHSA-h39h-j46r-8q5h
An issue was discovered in lib60870 v2.3.2.
Priority MEDIUM 58
An issue was discovered in lib60870 v2.3.2.
TI-2018-13431 CVE-2018-18957 · GHSA-8j92-r28v-983h
An issue has been found in libIEC61850 v1.3.
Priority MEDIUM 56
An issue has been found in libIEC61850 v1.3.
TI-2026-15713 CVE-2026-19259 · GHSA-36pq-cx6x-rc54
Memory corruption in MZ Automation libiec61850
Priority MEDIUM 55
A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1.
TI-2026-15682 CVE-2026-19206 · GHSA-72v3-v5v5-6xx3
MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
Priority MEDIUM 55
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1.
TI-2026-15611 CVE-2026-19108 · GHSA-c2h4-j5j4-67wf
MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free
Priority MEDIUM 55
A vulnerability was found in MZ Automation libiec61850 up to 1.6.1.
TI-2022-02745 CVE-2022-2972 · GHSA-g993-5jgg-hxg6
MZ Automation libIEC61850 Stack-Based Buffer Overflow
Priority MEDIUM 52
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device…
TI-2022-02743 CVE-2022-2970 · GHSA-h3j4-vfr6-r3jp
MZ Automation libIEC61850 Stack-Based Buffer Overflow
Priority MEDIUM 52
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which could allow an attacker to crash the device…
TI-2024-30853 CVE-2024-45971 · GHSA-gw7p-96wm-f9qw
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit…
Priority MEDIUM 50
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the MMS IdentifyResponse…
TI-2024-30852 CVE-2024-45970 · GHSA-759w-h925-rg2v
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit…
Priority MEDIUM 50
Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse…
TI-2020-11930 CVE-2020-15158
Heap buffer overflow in libIEC61850
Priority MEDIUM 46
In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer underflow will happen leading to heap buffer overflow.
TI-2018-13607 CVE-2018-19185 · GHSA-ww63-gh4x-rhww
An issue has been found in libIEC61850 v1.3.
Priority MEDIUM 46
An issue has been found in libIEC61850 v1.3.
TI-2018-13341 CVE-2018-18834 · GHSA-5qrf-j6wf-x965
An issue has been found in libIEC61850 v1.3.
Priority MEDIUM 46
An issue has been found in libIEC61850 v1.3.
TI-2022-02746 CVE-2022-2973 · GHSA-8cpp-2498-rv3h
MZ Automation libIEC61850 NULL Pointer Dereference
Priority MEDIUM 45
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations.