{"id":"CVE-2026-56758","state":"PUBLISHED","title":"MZ Automation libiec61850 Out-of-bounds Read","description":"The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS\n connection establishment. When parsing certain fields within the \ncalling AP title, an attacker controlled length value of zero or one may\n cause the parser to read past the end of a heap buffer.","publishedAt":"2026-07-30T22:29:20.516Z","updatedAt":"2026-07-31T15:52:20.133Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"icscert"},"assigner":"icscert","products":["MZ Automation GmbH libiec61850"],"affected":[{"vendor":"MZ Automation GmbH","product":"libiec61850","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.6.2","versionType":"custom"},{"version":"1.6.2","status":"unaffected"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T20:12:24.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/56xxx/CVE-2026-56758.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-56758","state":"PUBLISHED","datePublished":"2026-07-30T22:29:20.516Z","dateUpdated":"2026-07-31T15:52:20.133Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2026-07-27T19:32:49.404Z"},"containers":{"cna":{"title":"MZ Automation libiec61850 Out-of-bounds Read","descriptions":[{"lang":"en","value":"The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS\n connection establishment. When parsing certain fields within the \ncalling AP title, an attacker controlled length value of zero or one may\n cause the parser to read past the end of a heap buffer."}],"affected":[{"vendor":"MZ Automation GmbH","product":"libiec61850","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.6.2","versionType":"custom"},{"version":"1.6.2","status":"unaffected"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":6.5,"vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":6.9,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","lang":"en","description":"CWE-125","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2026-07-30T22:29:20.516Z"},"solutions":[{"lang":"en","value":"MZ Automation GmbH recommends that users update to version 1.6.2.","supportingMedia":[{"type":"text/html","base64":false,"value":"MZ Automation GmbH recommends that users update to version 1.6.2."}]}],"credits":[{"lang":"en","value":"Arun Babu of Central Power Research Institute reported this vulnerability to CISA.","type":"finder"}],"source":{"advisory":"ICSA-26-211-10","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.4"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-07-31T15:52:03.414515Z","id":"CVE-2026-56758","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-31T15:52:20.133Z"}}]}}}