CyberRota Analysis
AI-GeneratedThe vulnerability affects the nanoMODBUS library versions up to 1.23.0, specifically in the recv_read_device_identification_res() function, where an out-of-bounds write can occur due to improper validation of the object_length field against the caller-supplied buffers_length. This flaw allows a malicious Modbus server to send a response that exceeds the allocated buffer size, leading to potential memory corruption and exploitation of adjacent stack or heap memory. Organizations utilizing nanoMODBUS in their Modbus client implementations should prioritize patching this vulnerability to mitigate the risk of remote code execution or denial of service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only against the remaining PDU size (res_size_left) and is never validated against the caller-supplied buffers_length parameter.