CVE-2026-50032

NULL Pointer Dereference in MZ Automation libIEC61850 PUBLISHED

Description (CNA)

A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to crash the server by sending a WriteRequest with an empty listOfData field.

Affected (CNA)

Vendor / product	Versions
MZ Automation / libIEC61850	affected 1.0.0 through 1.6.1

CWE

CWE-476

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.