Skip to content
OpenAdvisories

Package · Ubuntu

snap7

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.4

    Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletion

    Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer addre…

  • High 7.4

    snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea

    snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field. Rogue or impersonated PLCs can return crafted ReadVar responses c…