LI
Product
libiec61850
51
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 8High 28Medium 15Low 0
Watch
Add libiec61850 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3976 | 8.8 | Nov 13 | A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical Affected: before 1.5 |
| CVE-2020-7054 | 8.8 | Jan 14 | MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type Affected: through 1.4.0 |
| CVE-2019-19931 | 8.8 | Dec 23 | In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow Affected: 1.4.0 |
| CVE-2026-68906 | 8.7 | Oct 16 | libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU Affected: < 1.6.2 |
| CVE-2026-68907 | 8.2 | Oct 16 | libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments Affected: < 1.6.2 |
| CVE-2026-49035 | 8.1 | Jul 23 | Stack-based Buffer Overflow in MZ Automation libIEC61850 Affected: 1.0.0 through 1.6.1 |
| CVE-2026-48741 | 7.5 | Oct 16 | libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS Affected: < 1.6.2 |
| CVE-2026-48503 | 7.5 | Oct 16 | libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead Affected: < 1.6.2 |
| CVE-2026-50032 | 7.5 | Jul 23 | NULL Pointer Dereference in MZ Automation libIEC61850 Affected: 1.0.0 through 1.6.1 |
| CVE-2026-50039 | 7.5 | Jul 23 | Stack-based Buffer Overflow in MZ Automation libIEC61850 Affected: 1.0.0 through 1.6.1 |
| CVE-2024-45969 | 7.5 | Nov 15 | NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious server to Cause a… Affected: before 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 |
| CVE-2024-28286 | 7.5 | Mar 20 | In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c Affected: 1.4.0 |
| CVE-2024-26529 | 7.5 | Mar 13 | An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest… Affected: through 1.5.3 |
| CVE-2023-27772 | 7.5 | Apr 13 | libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c Affected: 1.5.1 |
| CVE-2022-2973 | 7.5 | Sep 23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations Affected: before 1.5.0 |
| CVE-2022-2971 | 7.5 | Sep 23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which… Affected: before 1.5.0 |
| CVE-2022-21159 | 7.5 | Apr 15 | A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0 Affected: 1.5.0 |
| CVE-2022-1302 | 7.5 | Apr 12 | In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service Affected: before 1.5.1 |
| CVE-2021-45769 | 7.5 | Jan 14 | A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash Affected: 1.5.0 |
| CVE-2019-16510 | 7.5 | Sep 19 | libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose Affected: through 1.3.3 |
| CVE-2019-1010300 | 7.5 | Jul 15 | mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow Affected: 1.3.0; 1.3.1; 1.3.2 |
| CVE-2019-6719 | 7.5 | Jan 23 | An issue has been found in libIEC61850 v1.3.1 Affected: 1.3.1 |
| CVE-2019-6138 | 7.5 | Jan 11 | An issue has been found in libIEC61850 v1.3.1 Affected: 1.3.1 |
| CVE-2019-6136 | 7.5 | Jan 11 | An issue has been found in libIEC61850 v1.3.1 Affected: 1.3.1 |
| CVE-2019-6135 | 7.5 | Jan 11 | An issue has been found in libIEC61850 v1.3.1 Affected: 1.3.1 |
| CVE-2018-19093 | 7.5 | Nov 7 | An issue has been found in libIEC61850 v1.3 Affected: 1.3 |
| CVE-2018-18937 | 7.5 | Nov 5 | An issue has been found in libIEC61850 v1.3 Affected: 1.3 |
| CVE-2024-36702 | 7.4 | Jun 11 | libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c Affected: 1.5 |
Showing 28