MZ-Automation libIEC61850 1.5.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mz-automation:libiec61850:1.5.0:*:*:*:*:*:*:*

part: a version: 1.5.0 update: *

VendorMz Automation (b012e76d-06f8-52ef-bc7f-aea0855a8c51)
ProductLibiec61850 (9cf5a81b-76f3-5849-b2cb-79c2cf39a6ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mz-automation/libiec61850 purl2cpe 2026-06-01 10:11:36.882678

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36702 vulnerable 2026-06-08 06:39:45.614355 Details available
libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.
Published: 2024-06-11T00:00:00.000Z
Updated: 2026-07-09T00:31:11.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21159 vulnerable 2026-06-08 05:39:59.541201 Details available
HIGH (7.5)
A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerability.
Published: 2022-04-15T16:00:21.545Z
Updated: 2025-04-15T19:05:23.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45769 vulnerable 2026-06-08 05:36:49.380612 Details available
A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash.
Published: 2022-01-14T19:10:38.000Z
Updated: 2024-08-04T04:47:02.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.