MZ
Vendor
mz-automation
60
CVEs
0
On KEV
6
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-68906 | LI libiec61850 mz-automation | 8.7 | Oct 16 | libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU |
| CVE-2026-68907 | LI libiec61850 mz-automation | 8.2 | Oct 16 | libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments |
| CVE-2026-68908 | LI libiec61850 mz-automation | 5.3 | Oct 16 | libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path |
| CVE-2026-57446 | LI libiec61850 mz-automation | 5.3 | Oct 16 | libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle |
| CVE-2026-48741 | LI libiec61850 mz-automation | 7.5 | Oct 16 | libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS |
| CVE-2026-48503 | LI libiec61850 mz-automation | 7.5 | Oct 16 | libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead |
| CVE-2026-19259 | LI libiec61850 MZ Automation | 5.3 | Aug 8 | MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflow |
| CVE-2026-19206 | LI libiec61850 MZ Automation | 5.3 | Aug 7 | MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow |
| CVE-2026-19108 | LI libiec61850 MZ Automation | 5.3 | Aug 6 | MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free |
| CVE-2026-18583 | LI libiec61850 mz-automation | 5.3 | Aug 3 | mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds |
| CVE-2026-18582 | LI libiec61850 mz-automation | 5.3 | Aug 3 | mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap |
| CVE-2026-61893 | LI lib60870 MZ Automation | 6.5 | Jul 30 | MZ Automation lib60870 Out-of-bounds Read |
| CVE-2026-63033 | LI lib60870 MZ Automation | 6.5 | Jul 30 | MZ Automation lib60870 Out-of-bounds Read |
| CVE-2026-16002 | LI lib60870 MZ Automation | 8.2 | Jul 23 | Out-of-bounds Read in MZ Automation lib60870 |
| CVE-2026-50032 | LI libIEC61850 MZ Automation | 7.5 | Jul 23 | NULL Pointer Dereference in MZ Automation libIEC61850 |
| CVE-2026-50103 | LI libIEC61850 MZ Automation | 6.5 | Jul 23 | Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850 |
| CVE-2026-49035 | LI libIEC61850 MZ Automation | 8.1 | Jul 23 | Stack-based Buffer Overflow in MZ Automation libIEC61850 |
| CVE-2026-50039 | LI libIEC61850 MZ Automation | 7.5 | Jul 23 | Stack-based Buffer Overflow in MZ Automation libIEC61850 |
| CVE-2024-45969 | LI Libiec61850 Mz-automation | 7.5 | Nov 15 | NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious server to Cause a… |
| CVE-2024-45971 | LI Libiec61850 Mz-automation | 9.8 | Nov 15 | Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based… |
| CVE-2024-45970 | LI Libiec61850 Mz-automation | 9.8 | Nov 15 | Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based… |
| CVE-2024-36702 | LI Libiec61850 Mz-automation | 7.4 | Jun 11 | libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c |
| CVE-2024-28286 | LI Libiec61850 Mz-automation | 7.5 | Mar 21 | In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_file_service.c |
| CVE-2024-26529 | LI Libiec61850 Mz-automation | 7.5 | Mar 13 | An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest… |
| CVE-2024-25366 | LI Libiec61850 Mz-automation | 6.2 | Feb 20 | Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to… |
| CVE-2023-27772 | LI Libiec61850 Mz-automation | 7.5 | Apr 13 | libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c |
| CVE-2023-23205 | LI Lib60870 Mz-automation | 5.5 | Feb 24 | An issue was discovered in lib60870 v2.3.2 |
| CVE-2022-3976 | LI Libiec61850 Mz-automation | 8.8 | Nov 13 | A vulnerability has been found in MZ Automation libiec61850 up to 1.4 and classified as critical |
| CVE-2022-2973 | LI Libiec61850 Mz-automation | 7.5 | Sep 23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations |
| CVE-2022-2972 | LI Libiec61850 Mz-automation | 9.8 | Sep 23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which… |
| CVE-2022-2971 | LI Libiec61850 Mz-automation | 7.5 | Sep 23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which… |
| CVE-2022-2970 | LI Libiec61850 Mz-automation | 9.8 | Sep 23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) does not sanitize input before memcpy is used, which… |
| CVE-2022-21159 | LI Libiec61850 Mz-automation | 7.5 | Apr 15 | A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0 |
| CVE-2022-1302 | LI Libiec61850 Mz-automation | 7.5 | Apr 12 | In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service |
| CVE-2021-45773 | LI Lib60870 Mz-automation | 7.5 | Jan 14 | A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash |
| CVE-2021-45769 | LI Libiec61850 Mz-automation | 7.5 | Jan 14 | A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash |
| CVE-2021-21778 | LI Lib60870 Mz-automation | 7.5 | Aug 25 | A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0 |
| CVE-2020-15158 | LI Libiec61850 Mz-automation | 9.8 | Aug 26 | In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer underflow will happen leading to heap buffer overflow |
| CVE-2020-7054 | LI Libiec61850 Mz-automation | 8.8 | Jan 14 | MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type |
| CVE-2019-19958 | LI Libiec61850 Mz-automation | 6.5 | Dec 24 | In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation… |
| CVE-2019-19957 | LI Libiec61850 Mz-automation | 6.5 | Dec 24 | In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufPos and elementLength |
| CVE-2019-19944 | LI Libiec61850 Mz-automation | 6.5 | Dec 23 | In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos |
| CVE-2019-19931 | LI Libiec61850 Mz-automation | 8.8 | Dec 23 | In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow |
| CVE-2019-19930 | LI Libiec61850 Mz-automation | 6.5 | Dec 23 | In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation |
| CVE-2019-16510 | LI Libiec61850 Mz-automation | 7.5 | Sep 19 | libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose |
| CVE-2019-1010300 | LI Libiec61850 Mz-automation | 7.5 | Jul 15 | mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow |
| CVE-2019-6719 | LI Libiec61850 Mz-automation | 7.5 | Jan 23 | An issue has been found in libIEC61850 v1.3.1 |
| CVE-2019-6138 | LI Libiec61850 Mz-automation | 7.5 | Jan 11 | An issue has been found in libIEC61850 v1.3.1 |
| CVE-2019-6137 | LI Lib60870 Mz-automation | 7.5 | Jan 11 | An issue was discovered in lib60870 2.1.1 |
| CVE-2019-6136 | LI Libiec61850 Mz-automation | 7.5 | Jan 11 | An issue has been found in libIEC61850 v1.3.1 |
| CVE-2019-6135 | LI Libiec61850 Mz-automation | 7.5 | Jan 11 | An issue has been found in libIEC61850 v1.3.1 |
| CVE-2018-19185 | LI Libiec61850 Mz-automation | 9.8 | Nov 12 | An issue has been found in libIEC61850 v1.3 |
| CVE-2018-19122 | LI Libiec61850 Mz-automation | 4.3 | Nov 9 | An issue has been found in libIEC61850 v1.3 |
| CVE-2018-19121 | LI Libiec61850 Mz-automation | 4.3 | Nov 9 | An issue has been found in libIEC61850 v1.3 |
| CVE-2018-19093 | LI Libiec61850 Mz-automation | 7.5 | Nov 7 | An issue has been found in libIEC61850 v1.3 |
| CVE-2018-18957 | LI Libiec61850 Mz-automation | 9.8 | Nov 5 | An issue has been found in libIEC61850 v1.3 |
| CVE-2018-18937 | LI Libiec61850 Mz-automation | 7.5 | Nov 5 | An issue has been found in libIEC61850 v1.3 |
| CVE-2018-18834 | LI Libiec61850 Mz-automation | 9.8 | Oct 30 | An issue has been found in libIEC61850 v1.3 |
