Live › vulnerability › CVE-2026-48503
Go to dashboardlibIEC61850 is an open-source IEC 61850 client and server library. Before 1.6.2, an out-of-range initialPosition in an MMS fileOpen request lets a remote client receive oversized file read responses that include stale bytes from a reused connection buffer.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running an IEC 61850 server built on libIEC61850 before 1.6.2 with the MMS file service enabled are exposed to unauthenticated remote clients. Deployments where the file service is disabled, or that run a fixed version, can skip it.
No product ranges from the sources yet.
1.6.2 are affected.unknown for the exact setting name; the sources do not say).1.6.2 or later.unknown for the exact setting; the sources do not say).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/iso_mms/server/mms_file_service.c accepts an out-of-range initialPosition in fileOpen and stores it in the file-read state. The fileRead path then subtracts the larger read position from the file size using unsigned arithmetic and fails to limit the response to the actual FileSystem_readFile return value. The oversized response can include stale bytes from the reused connection buffer after the requested file contents, disclosing prior response data and protocol fragments to an unauthenticated remote client when the file service is enabled. This issue is fixed in version 1.6.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-48503")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.