Heap Buffer Overflow in IEC 60870-5-104 Protocol by MZ Automation
CVE-2026-61893

6.9MEDIUM

Key Information:

Vendor

Mz Automation

Status
Lib60870
Vendor
CVE Published:
30 July 2026

What is CVE-2026-61893?

A crafted IEC 60870-5-104 I-frame, specifically one that utilizes TypeID 104 (C_TS_NA_1) with an inflated object count, can exploit a flaw in the TestCommand_getFromBuffer function. This vulnerability can lead to unintended memory access, allowing the function to read beyond the bounds of a heap-allocated message buffer. Such an attack may facilitate the execution of arbitrary code or result in system instability.

Affected Version(s)

lib60870 2.4.0

lib60870 2.4.1

References

https://github.com/mz-automation/lib60870/security/adviso...
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

arun babu puthuparambil of Central Power Research Institute, Bengaluru, India reported this vulnerability to CISA.
.