136 matches found
CVE-2026-52134
CVE-2026-52134 affects libiec61850 v1.6, in the parseGoosePayload() function (/goose/goose_receiver.c). The issue allows bypassing authentication via captured GOOSE frames due to inadequate handling of replayed/stale frames in the GOOSE subscriber path, potentially delivering older state data to ...
CVE-2026-66720
The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE EtherType 0x88B8 Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing,...
Hitachi Energy RTU500 NULL Pointer Dereference (CVE-2026-32776)
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...
Hitachi Energy RTU500 NULL Pointer Dereference (CVE-2026-24515)
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured. This plugin only works with Tenable.ot. Please visit...
Hitachi Energy RTU500 NULL Pointer Dereference (CVE-2026-32778)
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier out-of-memory condition, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured. This plugin only works with Tenable.ot. Please visit...
Hitachi Energy RTU500 Infinite Loop (CVE-2026-32777)
libexpat before 2.7.5 allows an infinite loop while parsing DTD content, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
CVE-2025-3756
A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication...
Hitachi Energy RTU500 Product Allocation of Resources Without Limits or Throttling (CVE-2025-59375)
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. Product is only affected if IEC61850 functionality is configured. This plugin only works with Tenable.ot. Please visit...
EUVD-2021-13961
Malware in sbrugna...
EUVD-2018-16644
Malware in sbrugna...
EUVD-2025-15123
Malicious code in bioql PyPI...
EUVD-2022-42738
Malicious code in bioql PyPI...
EUVD-2024-54517
Malicious code in bioql PyPI...
EUVD-2022-34232
Malicious code in bioql PyPI...
EUVD-2022-40740
Malicious code in bioql PyPI...
EUVD-2025-19012
Malicious code in bioql PyPI...
EUVD-2025-19002
Malicious code in bioql PyPI...
CVE-2025-39203
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop...
CVE-2025-39205
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation...
CVE-2025-39203
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop...