CVE-2026-18583

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-18583

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18583.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-18583

Aliases

GHSA-7v2x-39mw-2979

Published

2026-08-03T04:15:08.718Z

Modified

2026-08-04T11:49:25.361274052Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds

Details

A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mmsmapping/mmsmapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds read. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.6.2 is capable of addressing this issue. Patch name: 062062daf4cb50c7aa76e01d6fb4d58fc9278a7d. Upgrading the affected component is recommended. The vendor was contacted early about this disclosure.

Database specific

{
    "cwe_ids": [
        "CWE-119",
        "CWE-125"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18583.json"
}

References

Affected packages

Git / github.com/mz-automation/libiec61850

Affected ranges

Type

GIT

Repo

https://github.com/mz-automation/libiec61850

Events

Introduced

519b0208cc79d1af09d5ca40fb9ad1fd93822e93

Last affected

a13961110b8238d2d8ea577c1fb7592ba3017ad8

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "1.6.0"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "introduced": "1.6.1"
        },
        {
            "last_affected": "1.6.1"
        }
    ]
}

Affected versions

1.*

1.6.0

1.6.1

v1.*

v1.6.0

v1.6.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18583.json"