Mz Automation Gmbh Libiec61850

9 CVEs affecting Mz Automation Gmbh Libiec61850. Latest disclosed: 2026-07-30. Critical: 0, High: 2.

Top CVEs affecting Mz Automation Gmbh Libiec61850
CVESeverityScorePublishedSummary
CVE-2026-66360High7.52026-07-30The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length check in the processing of…
CVE-2022-21159High7.52022-04-15A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of…
CVE-2026-66720Medium6.52026-07-30The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages…
CVE-2026-66369Medium6.52026-07-30The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus…
CVE-2026-66364Medium6.52026-07-30The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When…
CVE-2026-66349Medium6.52026-07-30The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER…
CVE-2026-65421Medium6.52026-07-30The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read…
CVE-2026-63550Medium6.52026-07-30The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded eleme…
CVE-2026-56758Medium6.52026-07-30The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, a…