Open PLC and Planet vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed one vulnerability in the OpenPLC logic controller and four vulnerabilities in the Planet WGR-500 router. For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from...

CVE-2025-53476

A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...

CVE-2025-53476: Missing Release of File Descriptor or Handle after Effective Lifetime

A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connectio...

zeek:zeek-modbus-fuzzer: Heap-buffer-overflow in binpac::ModbusTCP::ModbusTCP_Flow::deliver_DiagnosticsRequest

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5284863614517248 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-modbus-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000a42cd...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in binpac::ModbusTCP::bytestring_to_coils

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6165171353026560 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000e6726...

XINJE XL5E-16T ModbusTCP Protocol Denial of Service Vulnerability

XINJE XL5E-16T is a controller product of Ethernet type series. A denial of service vulnerability exists in the XINJE XL5E-16T ModbusTCP protocol, which can be exploited by attackers to cause the device to go down and not function properly...

XINJE XDME-30T4-E ModbusTCP Protocol Denial of Service Vulnerability

XINJE XDME-30T4-E is a controller product of Ethernet type series. A denial of service vulnerability exists in the XINJE XDME-30T4-E ModbusTCP protocol, which can be exploited by an attacker to cause the device to go down and not function properly...

Modbus Unit ID and Station ID Enumerator

Modbus is a cleartext protocol used in common SCADA systems, developed originally as a serial-line RS232 async protocol, and later transformed to IP, which is called ModbusTCP. default tcp port is 502. This module sends a command 0x04, read input register to the modbus endpoint. If this command i...

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption (PoC)

Automated Solutions ModbusTCP OPC Server - Remote Heap Corruption PoC !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruptio...