Description
The ISO Presentation layer contains a flaw in the handling of specific
parameters during normal mode negotiation. A missing length check in the
processing of the encoded presentation data allows an attacker
controlled field with a zero length value to trigger a bounded heap over
read. This condition occurs before MMS session establishment, a crafted
TCP/102 connection attempt can trigger the issue. The resulting over
read causes the process to terminate, leading to a denial of service
condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MZ Automation | libiec61850 | < 1.6.2 | 1.6.2 |
Advisories 1
- ICSA-26-211-10 MZ Automation GmbH libiec61850 CISA ICS & IT advisories · Jul 30, 2026