MZ Automation GmbH libiec61850
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the device.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-66720US | — | — | ||
The GOOSE subscriber component improperly validates the UTC timestamp
field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2
multicast messages. A specially crafted… | ||||
| CVE-2026-66369US | — | — | ||
The GOOSE parser contains an off-by-one boundary-handling flaw that can
be triggered by a single unauthenticated Layer-2 multicast frame on the
process bus. When specific GOOSE m… | ||||
| CVE-2026-66364US | — | — | ||
The GOOSE payload parser contains a boundary handling flaw that can be
triggered by a single unauthenticated Layer 2 multicast frame on the
process bus. When processing specific… | ||||
| CVE-2026-66360US | — | — | ||
The ISO Presentation layer contains a flaw in the handling of specific
parameters during normal mode negotiation. A missing length check in the
processing of the encoded presenta… | ||||
| CVE-2026-66349US | — | — | ||
The MMS server connection handler contains a flaw in its processing of
BER-encoded request data. When an MMS confirmed request PDU containing
an extended BER tag is received over… | ||||
| CVE-2026-65421US | — | — | ||
The MMS BER decoder contains a flaw in decoding fixed-width BER fields
(boolean/integer): an attacker-supplied length value is not validated,
causing a read past the end of a hea… | ||||
| CVE-2026-63550US | — | — | ||
The MMS BER decoder contains a boundary-handling flaw in the processing
of certain fields within confirmed-request messages. When a crafted
BER-encoded element is received over a… | ||||
| CVE-2026-56758US | — | — | ||
The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS
connection establishment. When parsing certain fields within the
calling AP title, an attacker controlled… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-211-10 JSONself
- ICSA Advisory ICSA-26-211-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
- Mitigationlibiec61850
MZ Automation GmbH recommends that users update to version 1.6.2.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan