The IEC 61850 driver includes OpenSSL (libcrypto.so). Older versions of the module bundle OpenSSL 3.0.7, which vulnerability scanners flag. This isn’t an Ignition CVE, but the library is out of date and we recommend updating.
If you don’t use the IEC 61850 driver, remove the module. Fewer modules features a smaller attack surface.
If you do use it, upgrade to 8.3.9 or later. That release includes the updated protocol stack along with other driver fixes and improvements. On 8.1, the same update is targeted for 8.1.56 (IGN-16884), estimated early December.
Note: the module extracts native libraries to the gateway’s temp directory and doesn’t remove old copies. After upgrading, stop the gateway, clear /data/temp, and restart. This is safe to do while the gateway is stopped. The old file isn’t loaded by the updated module, so it’s not a live risk, but scanners will keep flagging it.