Mayur Agnihotri

**Name of the Vulnerable Software and Affected Versions** davenardella snap7 versions prior to 1.4.4 **Description** A remote attack can cause memory corruption by manipulating the `DataLen` argument within the `TSnap7MicroClient::opUpload()` function located in the src/core/s7 micro client.cpp file. **Recommendations** As a temporary workaround, restrict the use of the `TSnap7MicroClient::opUpload()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.