266 matches found
EUVD-2026-52152
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...
CVE-2026-18583
The vulnerability CVE-2026-18583 affects mz-automation libiec61850
CVE-2026-18583
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated...
CVE-2026-18582
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
CVE-2026-18582
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
CVE-2026-18582 mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
CVE-2026-52134
An issue in the parseGoosePayload function /goose/goosereceiver.c of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame...
CVE-2026-66364
CVE-2026-66364 affects the GOOSE payload parser (notably in the libiec61850/GOOSE implementation referenced by MZ Automation). The root cause is a boundary handling flaw: during processing of certain payload fields, an attacker-controlled inner element length may exceed its enclosing length, caus...
CVE-2026-49035 Stack-based Buffer Overflow in MZ Automation libIEC61850
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...
CVE-2026-50039 Stack-based Buffer Overflow in MZ Automation libIEC61850
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...
CVE-2026-50039
CVE-2026-50039 affects libIEC61850 MMS value cache (v1.0.0 through v1.6.1). The vulnerability is a stack-based overflow via an unbounded copy, leading to DoS. The issue is pre-auth in the MMS value cache path and can be triggered by a network request that causes an overflow in the affected compon...
CVE-2020-7054
MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMSBITSTRING data type...
CVE-2019-16510
libIEC61850 through 1.3.3 has a use-after-free in MmsServerwaitReady in mms/isomms/server/mmsserver.c, as demonstrated by serverexamplegoose...
EUVD-2020-7234
Malware in sbrugna...
EUVD-2018-10835
Malware in sbrugna...
EUVD-2018-10661
Malware in sbrugna...
EUVD-2019-15705
Malware in sbrugna...
EUVD-2018-10643
Malware in sbrugna...