Vulnerabilidades do MZ Automation Lib60870
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam MZ Automation Lib60870: 3 registro(s), com versões afetadas e correções.
CVE-2026-63033
Média · 6.5
CWE-125 30/07/2026
MZ Automation lib60870 Out-of-bounds Read
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding
what fits in the ASDU body causes InformationObject_ParseObjectAddress
to read one byte past the end of the heap-allocated message buffer.
CVE-2026-61893
Média · 6.5
CWE-125 30/07/2026
MZ Automation lib60870 Out-of-bounds Read
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an
inflated object count causes TestCommand_getFromBuffer to read one byte
past the end of the heap-allocated message buffer.
CVE-2026-16002
Alta · 8.2
CWE-125 23/07/2026
Out-of-bounds Read in MZ Automation lib60870
The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to crash the parsing process and cause a denial of service.