Description
A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as_ct_write of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gmg137 | snap7-rs | 1.142.0, 1.142.1 | — |
References
- VDB-336402 | gmg137 snap7-rs client.rs as_ct_write heap-based overflow vdb-entry technical-description
- VDB-336402 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- https://gitee.com/gmg137/snap7-rs/issues/ID2H74 exploit issue-tracking
- https://gitee.com/gmg137/snap7-rs/ product