CVE-2026-66349— MZ Automation libiec61850 Out-of-bounds Read
Possible ATT&CK Techniques 2AI
T1190 · Exploit Public-Facing Application T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-66349
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MZ Automation libiec61850 Out-of-bounds Read
Source: CVE Program / CVE List V5
Vulnerability Description
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This results in a one byte heap out-of-bounds read and causes the MMS service process to terminate, leading to a denial-of-service condition.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MZ Automation GmbH | libiec61850 | 0 ~ 1.6.2 | - |
II. Public POCs for CVE-2026-66349
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-66349
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-66349 (2)
Same Patch Batch · MZ Automation GmbH · 2026-07-30 · 8 CVEs total
| CVE-2026-66360 | 7.5 HIGH | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-66364 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-65421 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-56758 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-66369 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-66720 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-63550 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
IV. Related Vulnerabilities
V. Comments for CVE-2026-66349
No comments yet