Mz-automation vulnerabilities

Products

• Libiec61850 44
• Lib60870 7

Newest

• mz automation libiec61850 libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU CVE-2026-68906 8.7 HighOctober 16, 2026
• mz automation libiec61850 libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle CVE-2026-57446 5.3 MediumOctober 16, 2026
• mz automation libiec61850 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS CVE-2026-48741 7.5 HighOctober 16, 2026
• mz automation libiec61850 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead CVE-2026-48503 7.5 HighOctober 16, 2026
• mz automation libiec61850 libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments CVE-2026-68907 8.2 HighAugust 3, 2026
• mz automation libiec61850 mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds CVE-2026-18583 6.9 MediumAugust 3, 2026
• mz automation libiec61850 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path CVE-2026-68908 5.3 MediumAugust 3, 2026
• mz automation libiec61850 mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap CVE-2026-18582 6.9 MediumAugust 3, 2026
• mz-automation libiec61850, lib60870 +1 more Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit... CVE-2024-45971 9.8 CriticalNovember 15, 2024
• mz-automation libiec61850, lib60870 +1 more Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit... CVE-2024-45970 9.8 CriticalNovember 15, 2024
• mz-automation libiec61850 NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit... CVE-2024-45969 7.5 HighNovember 15, 2024
• mz-automation libiec61850 libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength... CVE-2024-36702 7.4 HighJune 11, 2024
• mz-automation libiec61850 In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the... CVE-2024-28286 7.5 HighMarch 20, 2024
• mz-automation libiec61850 An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a... CVE-2024-26529 7.5 HighMarch 13, 2024
• mz-automation lib60870, libiec61850 +1 more Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to... CVE-2024-25366 6.2 MediumFebruary 20, 2024
• mz-automation libiec61850 libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function... CVE-2023-27772 7.5 HighApril 13, 2023
• mz-automation lib60870 An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C... CVE-2023-23205 5.5 MediumFebruary 24, 2023
• mz automation libiec61850 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal CVE-2022-3976 5.5 MediumNovember 13, 2022
• mz automation libiec61850 MZ Automation libIEC61850 Stack-Based Buffer Overflow CVE-2022-2970 10.0 CriticalSeptember 23, 2022
• mz automation libiec61850 MZ Automation libIEC61850 Stack-Based Buffer Overflow CVE-2022-2972 10.0 CriticalSeptember 23, 2022
• mz automation libiec61850 MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion') CVE-2022-2971 8.6 HighSeptember 23, 2022
• mz automation libiec61850 MZ Automation libIEC61850 NULL Pointer Dereference CVE-2022-2973 8.6 HighSeptember 23, 2022
• mz automation libiec61850 A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ... CVE-2022-21159 7.5 HighApril 15, 2022
• mz automation libiec61850 Malformed Goose Message in LibIEC61850 may result in a denial of service CVE-2022-1302 7.5 HighApril 12, 2022
• mz-automation lib60870 A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c... CVE-2021-45773 7.5 HighJanuary 14, 2022
• mz-automation libiec61850 A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of... CVE-2021-45769 7.5 HighJanuary 14, 2022
• mz-automation lib60870 A denial of service vulnerability exists in the ASDU message processing functionality of MZ... CVE-2021-21778 7.5 HighAugust 25, 2021
• mz automation libiec61850 Heap buffer overflow in libIEC61850 CVE-2020-15158 7.7 HighAugust 26, 2020
• mz-automation libiec61850 MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has... CVE-2020-7054 8.8 HighJanuary 14, 2020
• mz-automation libiec61850 In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an... CVE-2019-19958 6.5 MediumDecember 24, 2019
• mz-automation libiec61850 In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of... CVE-2019-19957 6.5 MediumDecember 24, 2019
• mz-automation libiec61850 In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read,... CVE-2019-19944 6.5 MediumDecember 23, 2019
• mz-automation libiec61850 In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer... CVE-2019-19930 6.5 MediumDecember 23, 2019
• mz-automation libiec61850 In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap... CVE-2019-19931 8.8 HighDecember 23, 2019
• mz-automation libiec61850 libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server... CVE-2019-16510 7.5 HighSeptember 19, 2019
• mz automation libiec61850 mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is:... CVE-2019-1010300 7.5 HighJuly 15, 2019
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function... CVE-2019-6719 7.5 HighJanuary 23, 2019
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory... CVE-2019-6138 7.5 HighJanuary 11, 2019
• mz-automation lib60870 An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a... CVE-2019-6137 7.5 HighJanuary 11, 2019
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3.1. Ethernet_setProtocolFilter in hal/ethernet/linux... CVE-2019-6136 7.5 HighJanuary 11, 2019
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a... CVE-2019-6135 7.5 HighJanuary 11, 2019
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in... CVE-2018-19185 9.8 CriticalNovember 12, 2018
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in... CVE-2018-19122 4.3 MediumNovember 9, 2018
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in... CVE-2018-19121 4.3 MediumNovember 9, 2018
• mz-automation libiec61850 ** DISPUTED ** An issue has been found in libIEC61850 v1.3. It is a SEGV in... CVE-2018-19093 Disputed 7.5 HighNovember 7, 2018
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in... CVE-2018-18957 Public exploit EPSS 11.6% 9.8 CriticalNovember 5, 2018
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in... CVE-2018-18937 7.5 HighNovember 5, 2018
• mz-automation libiec61850 An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in... CVE-2018-18834 9.8 CriticalOctober 30, 2018