CyberRota Analysis
AI-GeneratedThe vulnerability affects the LINUXTCP port of FreeModbus, where an off-by-one bounds check flaw allows an unauthenticated attacker to send a specially crafted Modbus TCP packet that overflows a static buffer. This can lead to potential arbitrary code execution or data corruption due to the overflow into adjacent memory. Organizations using FreeModbus on Linux should prioritize patching this critical vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MB_TCP_BUF_SIZE limit.