Siemens SIMATIC and SIPLUS products Uncontrolled Resource Consumption (CVE-2025-40944)

Affected devices do not properly handle S7 protocol session disconnect requests. When receiving a valid S7 protocol Disconnect Request COTP DR TPDU on TCP port 102, the devices enter an improper session state. This could allow an attacker to cause the device to become unresponsive, leading to a...

EUVD-2017-1498

Malware in sbrugna...

Input validation

The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...

CVE-2017-1000230

Vulnerability summary: CVE-2017-1000230 affects Snap7 Server version 1.4.1. The denial-of-service is triggered by unexpected input in the ItemCount field of the ReadVar/WriteVar functions of the S7 protocol implementation, causing the server to crash. What is affected: Snap7 Server 1.4.1; compone...