Is there a public PoC exploit available for CVE-2025-14673?

Yes, a public proof-of-concept exploit is available for CVE-2025-14673. Prioritise patching immediately. EPSS: 0.1%.

snap7-rs CVE-2025-14673

Q: What is the CVSS score of CVE-2025-14673?

CVE-2025-14673 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

MEDIUM

Buffer Overflow (CWE-119)

2025-12-14 cna@vuldb.com

Buffer Overflow Snap7 Rs Gmg137

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.3 HIGH

Network attack, no privileges, low impact, no scope change

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 17:16 vuln.today

CVE Published

Dec 14, 2025 - 18:15 cve.org

MEDIUM 5.5

DescriptionCVE.org

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as_ct_write of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Heap-based buffer overflow in snap7-rs up to version 1.142.1 allows remote attackers to corrupt memory via crafted S7 write requests to the S7Client::as_ct_write function. Public exploit code exists, but EPSS score is low (0.09%) and no active exploitation has been confirmed (KEV not listed). The vulnerability poses a moderate risk of denial of service or potential code execution in industrial automation environments using this Rust S7 library.

Technical ContextAI

snap7-rs is a Rust binding for Snap7, a library used to communicate with Siemens S7 PLCs over Ethernet. The vulnerable function as_ct_write resides in the test file /tests/snap7-rs/src/client.rs but may be incorporated into production code. The CWE-119 classification indicates a buffer overflow, specifically heap-based, likely caused by missing or incorrect bounds checking when processing data for S7 write operations. The CPE entry cpe:2.3:a:gmg137:snap7-rs:*:*:*:*:*:*:*: confirms all versions up to 1.142.1 are affected.

RemediationAI

Upgrade snap7-rs to a patched version beyond 1.142.1 as soon as the vendor releases a fix; no official patched version has been confirmed at the time of analysis. Until then, mitigate by restricting network access to services using the library, implementing input validation on S7 write requests, or switching to an alternative S7 library with active maintenance. Monitor the vendor issue tracker for updates.