CVE-2026-18583— mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| mz-automation | libiec61850 | 1.6.0 | affected |
1.6.1 | affected | ||
1.6.2 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-18583
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms_mapping/mms_mapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.6.2 is capable of addressing this issue. Patch name: 062062daf4cb50c7aa76e01d6fb4d58fc9278a7d. Upgrading the affected component is recommended. The vendor was contacted early about this disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
MZ Automation GmbH libiec61850 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MZ Automation GmbH libiec61850是德国MZ Automation GmbH公司开源的一套支持IEC 61850标准的工业通信组件。 MZ Automation GmbH libiec61850 1.6.1及之前版本存在缓冲区错误漏洞，该漏洞源于MMS Request Handler组件的src/iec61850/server/mms_mapping/mms_mapping.c文件中的checkDataSetAccess函数存在越界读取问题，可能导致远程攻击者利用该漏洞发起攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| mz-automation | libiec61850 | 1.6.0 | cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-18583
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18583
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-18583 (1)
Vendor Advisories for CVE-2026-18583 (1)
Vendor Pages for CVE-2026-18583 (2)
Other References for CVE-2026-18583 (1)
IV. Related Vulnerabilities
Same product: libiec61850
- CVE-2026-19259
MZ Automation libiec61850 MMS Protocol Workflow iec61850_com - CVE-2026-19206
MZ Automation libiec61850 ASDU Element sv_subscriber.c SVRec - CVE-2026-19108
MZ Automation libiec61850 URCB Revalidation reporting.c dele - CVE-2026-18582
mz-automation libiec61850 Report Sending Path reporting.c Re - CVE-2026-66720
MZ Automation libiec61850 Out-of-bounds Read
Same weakness: CWE-125
- CVE-2026-19955
TrailDB TOC Validation tdb.c tdb_open out-of-bounds - CVE-2026-49282
Capstone M68K and RISCV `cs_insn_name()` invalid IDs can tri - CVE-2026-18020
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-17649
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-17226
IBM i is Affected By Multiple Vulnerabilities in NetServer
V. Comments for CVE-2026-18583
No comments yet