Approved changes feed: RSS · Atom

cpe:2.3:a:mz_automation:lib60870:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMz Automation (08e79d7a-a50d-5d72-aa90-6a2dd0f650be)
ProductLib60870 (01c4f40b-aa58-5b22-ab4c-1b9908dd49fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-63033 vulnerable 2026-09-16 04:32:49.494021 MZ Automation lib60870 Out-of-bounds Read
MEDIUM (6.5)
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.
Published: 2026-07-30T22:54:25.681Z
Updated: 2026-07-31T19:23:47.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61893 vulnerable 2026-09-16 04:32:45.205910 MZ Automation lib60870 Out-of-bounds Read
MEDIUM (6.5)
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.
Published: 2026-07-30T22:58:32.226Z
Updated: 2026-07-31T16:00:07.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16002 vulnerable 2026-07-29 00:26:18.507628 Out-of-bounds Read in MZ Automation lib60870
HIGH (8.2)
The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to crash the parsing process and cause a denial of service.
Published: 2026-07-23T20:57:11.463Z
Updated: 2026-07-24T13:36:36.942Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.