← Back to Feed
MZ Automation lib60870
CVE-2026-61893CVE-2026-63033
July 30, 2026 · CISA (US-CERT) · Severity: CRITICAL
MZ Automation lib60870 is affected by two out-of-bounds read vulnerabilities in version 2.4.0. Specially crafted IEC 60870-5-104 I-frames can cause the device to crash due to heap buffer over-read. Users are advised to update to version 2.4.1 when available.
Key Takeaways
- Out-of-bounds read vulnerabilities in MZ Automation lib60870 version 2.4.0.
- Crafted IEC 60870-5-104 I-frames can cause heap buffer over-read and crash.
- Update to version 2.4.1 when available to prevent denial-of-service.