CVE-2026-111280

CVE-2026-111280 · snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field. Rogue or impersonated PLCs can return crafted ReadVar responses causing memcpy of up to 65535 bytes into caller buffers, crashing SCADA, HMI, or gateway processes and corrupting memory.

CVSS 8.3 · Élevée · EPSS 0,5%

Publication

2026-10-15T21:43:24.650Z

Mise à jour

2026-10-23T19:56:20.321Z

Pile logicielle: system

Vérifiez votre serveur →