Description
Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Modbus Tools | Modbus Slave | unspecified – ≤ 7.4.2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
webraybtl/CVE-2022-1068 ★ 3 · Jan 9, 2023
Modbus Slave缓冲区溢出漏洞CVE-2022-1068分析与复现
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- ICSA-22-088-04 Modbus Tools Modbus Slave CISA ICS & IT advisories · Mar 29, 2022