CVE-2026-66360

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-66360", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "state": "PUBLISHED", "assignerShortName": "icscert", "dateReserved": "2026-07-27T19:32:49.407Z", "datePublished": "2026-07-30T22:25:54.454Z", "dateUpdated": "2026-07-31T15:50:41.354Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-07-30T22:25:54.454Z"}, "title": "MZ Automation libiec61850 Out-of-bounds Read", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125", "type": "CWE"}]}], "affected": [{"vendor": "MZ Automation GmbH", "product": "libiec61850", "versions": [{"status": "affected", "version": "0", "lessThan": "1.6.2", "versionType": "custom"}, {"status": "unaffected", "version": "1.6.2"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiation. A missing length check in the\n processing of the encoded presentation data allows an attacker \ncontrolled field with a zero length value to trigger a bounded heap over\n read. This condition occurs before MMS session establishment, a crafted\n TCP/102 connection attempt can trigger the issue. The resulting over \nread causes the process to terminate, leading to a denial of service \ncondition.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiation. A missing length check in the\n processing of the encoded presentation data allows an attacker \ncontrolled field with a zero length value to trigger a bounded heap over\n read. This condition occurs before MMS session establishment, a crafted\n TCP/102 connection attempt can trigger the issue. The resulting over \nread causes the process to terminate, leading to a denial of service \ncondition."}]}], "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10"}, {"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "solutions": [{"lang": "en", "value": "MZ Automation GmbH recommends that users update to version 1.6.2.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "MZ Automation GmbH recommends that users update to version 1.6.2."}]}], "credits": [{"lang": "en", "value": "Arun Babu of Central Power Research Institute reported this vulnerability to CISA.", "type": "finder"}], "source": {"advisory": "ICSA-26-211-10", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-31T15:50:13.939405Z", "id": "CVE-2026-66360", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T15:50:41.354Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-66360", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-31T15:50:13.939405Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T15:50:33.546Z"}}], "cna": {"title": "MZ Automation libiec61850 Out-of-bounds Read", "source": {"advisory": "ICSA-26-211-10", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Arun Babu of Central Power Research Institute reported this vulnerability to CISA."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "MZ Automation GmbH", "product": "libiec61850", "versions": [{"status": "affected", "version": "0", "lessThan": "1.6.2", "versionType": "custom"}, {"status": "unaffected", "version": "1.6.2"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "MZ Automation GmbH recommends that users update to version 1.6.2.", "supportingMedia": [{"type": "text/html", "value": "MZ Automation GmbH recommends that users update to version 1.6.2.", "base64": false}]}], "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10"}, {"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiation. A missing length check in the\n processing of the encoded presentation data allows an attacker \ncontrolled field with a zero length value to trigger a bounded heap over\n read. This condition occurs before MMS session establishment, a crafted\n TCP/102 connection attempt can trigger the issue. The resulting over \nread causes the process to terminate, leading to a denial of service \ncondition.", "supportingMedia": [{"type": "text/html", "value": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiation. A missing length check in the\n processing of the encoded presentation data allows an attacker \ncontrolled field with a zero length value to trigger a bounded heap over\n read. This condition occurs before MMS session establishment, a crafted\n TCP/102 connection attempt can trigger the issue. The resulting over \nread causes the process to terminate, leading to a denial of service \ncondition.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-07-30T22:25:54.454Z"}}}, "cveMetadata": {"cveId": "CVE-2026-66360", "state": "PUBLISHED", "dateUpdated": "2026-07-31T15:50:41.354Z", "dateReserved": "2026-07-27T19:32:49.407Z", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "datePublished": "2026-07-30T22:25:54.454Z", "assignerShortName": "icscert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "libiec61850", "vendor": "MZ Automation GmbH", "versions": [{"lessThan": "1.6.2", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "1.6.2"}]}], "source": "ics-cert@hq.dhs.gov"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The ISO Presentation layer contains a flaw in the handling of specific \nparameters during normal mode negotiation. A missing length check in the\n processing of the encoded presentation data allows an attacker \ncontrolled field with a zero length value to trigger a bounded heap over\n read. This condition occurs before MMS session establishment, a crafted\n TCP/102 connection attempt can trigger the issue. The resulting over \nread causes the process to terminate, leading to a denial of service \ncondition."}, {"lang": "es", "value": "La capa de presentaci\u00f3n ISO contiene una falla en el manejo de par\u00e1metros espec\u00edficos durante la negociaci\u00f3n del modo normal. Una verificaci\u00f3n de longitud faltante en el procesamiento de los datos de presentaci\u00f3n codificados permite que un campo controlado por el atacante con un valor de longitud cero desencadene una lectura excesiva de un mont\u00f3n acotado. Esta condici\u00f3n ocurre antes del establecimiento de la sesi\u00f3n MMS; un intento de conexi\u00f3n TCP/102 manipulado puede desencadenar el problema. La lectura excesiva resultante provoca la terminaci\u00f3n del proceso, lo que lleva a una condici\u00f3n de denegaci\u00f3n de servicio."}], "id": "CVE-2026-66360", "lastModified": "2026-10-23T23:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-66360", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-31T15:50:13.939405Z", "version": "2.0.3"}}]}, "published": "2026-07-30T23:16:53.070", "references": [{"source": "ics-cert@hq.dhs.gov", "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json"}, {"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.6.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.6.2"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "libiec61850", "source": "cna", "vendor": "MZ Automation GmbH"}, "product": "libiec61850", "vendor": "mz-automation"}], "created": "2026-07-31T00:00:05.441359+00:00", "updated": "2026-08-03T10:30:18.415550+00:00", "vendors": ["mz-automation", "mz-automation$PRODUCT$libiec61850"]}