This vulnerability affects the Reporting_RCBWriteAccessHandler function in the src/iec61850/server/mms_mapping/reporting.c component of mz-automation libiec61850 up to version 1.6.1. The flaw causes a free operation on memory that is not allocated on the heap, which can lead to undefined behavior or potential remote exploitation. The vulnerability can be triggered remotely without authentication. An exploit has been publicly released. The issue is fixed in version 1.6.2, with patch commit 5b2a69f44256b8548927d8afdd7ac5f5381abe1e.

Successful exploitation may allow remote attackers to cause memory corruption by freeing memory not allocated on the heap. This can lead to application instability or potentially enable further attacks. The vulnerability does not require privileges or user interaction to exploit. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges, no user interaction, and limited impact on availability.

Upgrade mz-automation libiec61850 to version 1.6.2 or later, which contains the official fix for this vulnerability. Since the vendor has provided a patch, applying this update is the recommended remediation. No other mitigations are specified or required.