CVE-2020-7054: Mz-Automation LIBIEC61850

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type.

Affected products

• Mz-Automation LIBIEC61850: up to and including 1.4.0

Published 2020-01-14. Last modified 2026-06-17.