snap7-rs 缓冲区错误漏洞

snap7-rs is a library for C++ by the individual developer gmg137. A buffer error vulnerability exists in snap7-rs 1.142.1 and earlier versions, which stems from memory corruption due to incorrect operation of the function pthreadconddestroy in the component Public API...

PT-2025-29476 · Snap7-Rs · Snap7-Rs

Name of the Vulnerable Software and Affected Versions: snap7-rs versions up to 1.142.1 Description: A critical issue exists in snap7-rs related to memory corruption. The pthread cond destroy function within the Public API component is affected. The exploit for this issue has been publicly...

CVE-2017-1000230

The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...

CVE-2020-22552

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed...

CVE-2020-22552

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed...

Code injection

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed...

CVE-2020-22552

The CVE-2020-22552 issue affects the Snap7 server component, specifically version 1.4.1, where an attacker sending a crafted COTP packet with the last-data-unit flag set to No and triggering a S7 writes a var function can crash the server. The root cause is described in the PT-2020-15480 report, ...

CVE-2020-22552

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed...

PT-2020-15480

Name of the Vulnerable Software and Affected Versions Snap7 version 1.4.1 Description The issue occurs when an attacker sends a crafted packet using the COTP protocol with the last-data-unit flag set to No, and the S7 function writes a variable. This results in the Snap7 server crashing...

Snap7 Server Denial of Service Vulnerability

Snap7 is an open source, multi-platform Ethernet communication suite for local connectivity with PLCs.Snap7 Server is one of the server components. A security vulnerability exists in Snap7 Server version 1.4.1. An attacker can exploit this vulnerability to cause a denial of service crash...

CVE-2017-1000230

The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...

CVE-2017-1000230

The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...

Input validation

The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...

CVE-2017-1000230

The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack...

CVE-2017-1000230

Vulnerability summary: CVE-2017-1000230 affects Snap7 Server version 1.4.1. The denial-of-service is triggered by unexpected input in the ItemCount field of the ReadVar/WriteVar functions of the S7 protocol implementation, causing the server to crash. What is affected: Snap7 Server 1.4.1; compone...