Gmg137
Monthly
Remote code execution is possible through a heap-based buffer overflow in the S7Client::download function of the gmg137 snap7-rs library. The flaw affects all builds up to git commit 153d3e8c, as the project uses a rolling release model and has not issued a patch. A publicly available exploit allows an attacker who can manipulate PLC responses to potentially execute arbitrary code on the client system.
Heap-based buffer overflow in snap7-rs up to version 1.142.1 allows remote attackers to corrupt memory via crafted S7 write requests to the S7Client::as_ct_write function. Public exploit code exists, but EPSS score is low (0.09%) and no active exploitation has been confirmed (KEV not listed). The vulnerability poses a moderate risk of denial of service or potential code execution in industrial automation environments using this Rust S7 library.
Heap-based buffer overflow in gmg137 snap7-rs library up to version 1.142.1 allows remote attackers to corrupt heap memory via the TSnap7MicroClient::opWriteArea function. The vulnerability requires no authentication or user interaction (CVSS 4.0 AV:N/AC:L/PR:N/UI:N) and a public exploit is available, though the EPSS score is low at 0.09%, suggesting limited active exploitation at this time.
Memory corruption in the pthread_cond_destroy function of snap7-rs's Public API allows adjacent-network attackers with low privileges to cause limited confidentiality, integrity, and availability impacts. The vulnerability affects versions up to 1.142.1, and publicly available exploit code has been published. Despite a 'critical' classification in the description, EPSS indicates a low exploitation probability (0.04%), and the flaw is not listed in CISA KEV.
Remote code execution is possible through a heap-based buffer overflow in the S7Client::download function of the gmg137 snap7-rs library. The flaw affects all builds up to git commit 153d3e8c, as the project uses a rolling release model and has not issued a patch. A publicly available exploit allows an attacker who can manipulate PLC responses to potentially execute arbitrary code on the client system.
Heap-based buffer overflow in snap7-rs up to version 1.142.1 allows remote attackers to corrupt memory via crafted S7 write requests to the S7Client::as_ct_write function. Public exploit code exists, but EPSS score is low (0.09%) and no active exploitation has been confirmed (KEV not listed). The vulnerability poses a moderate risk of denial of service or potential code execution in industrial automation environments using this Rust S7 library.
Heap-based buffer overflow in gmg137 snap7-rs library up to version 1.142.1 allows remote attackers to corrupt heap memory via the TSnap7MicroClient::opWriteArea function. The vulnerability requires no authentication or user interaction (CVSS 4.0 AV:N/AC:L/PR:N/UI:N) and a public exploit is available, though the EPSS score is low at 0.09%, suggesting limited active exploitation at this time.
Memory corruption in the pthread_cond_destroy function of snap7-rs's Public API allows adjacent-network attackers with low privileges to cause limited confidentiality, integrity, and availability impacts. The vulnerability affects versions up to 1.142.1, and publicly available exploit code has been published. Despite a 'critical' classification in the description, EPSS indicates a low exploitation probability (0.04%), and the flaw is not listed in CISA KEV.