CVE-2026-63033
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.
Risk Assessment
An attacker can remotely crash the IEC 60870-5-104 handling process, disrupting communication in power automation systems and potentially causing power supply interruptions.
Recommendation
Install the update provided by the power automation system vendor that adds bounds checking in the InformationObject_ParseObjectAddress function.
Other vulnerabilities in IEC 60870-5-104 parser
Original NVD description (English source)
A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS