CISA 2026-07-30

MZ Automation GmbH libiec61850

Machine-generated analysis · WAYSCloud LLM

Versions of libiec61850 earlier than 1.6.2 are vulnerable to out-of-bounds reads that can cause a denial-of-service.

Context

The advisory concerns the libiec61850 library from MZ Automation GmbH.
Improper validation of IEC 61850 GOOSE messages can trigger heap out-of-bounds reads, causing the subscriber process to crash.
The library is deployed worldwide in energy-sector equipment.
MZ Automation recommends updating to version 1.6.2.

Operator considerations

- Check: inventory installed libiec61850 versions and flag any below 1.6.2.
- Patch: upgrade the library to version 1.6.2 as advised by the vendor.
- Log: watch for unexpected crashes of processes that use libiec61850.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the device.

The following versions of MZ Automation GmbH libiec61850 are affected:

libiec61850

Read the full advisory on CISA →