PT-2025-51171 · Snap7-Rs · Snap7-Rs

CVE-2025-14672

·

Published

2025-12-14

·

Updated

2025-12-15

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1
Description A flaw exists in snap7-rs up to version 1.142.1. The issue resides in the TSnap7MicroClient::opWriteArea function within the s7 micro client.cpp file, potentially leading to a heap-based buffer overflow. Remote attackers may be able to exploit this issue. An exploit for this issue has been published.
Recommendations Versions prior to 1.142.1 are recommended.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-14672

Affected Products

Snap7-Rs