Snap7 Rs
CVE-2025-15247
MEDIUM
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionCVE.org
A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Remote code execution is possible through a heap-based buffer overflow in the S7Client::download function of the gmg137 snap7-rs library. The flaw affects all builds up to git commit 153d3e8c, as the project uses a rolling release model and has not issued a patch. A publicly available exploit allows an attacker who can manipulate PLC responses to potentially execute arbitrary code on the client system.
Heap-based buffer overflow in snap7-rs up to version 1.142.1 allows remote attackers to corrupt memory via crafted S7 wr
Heap-based buffer overflow in gmg137 snap7-rs library up to version 1.142.1 allows remote attackers to corrupt heap memo
Memory corruption in the pthread_cond_destroy function of snap7-rs's Public API allows adjacent-network attackers with l
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today