CyberRota Analysis
AI-GeneratedThe vulnerability affects the davenardella snap7 library up to version 1.4.3, specifically within the TSnap7MicroClient::opUpload function, where improper handling of the DataLen argument can lead to memory corruption. This issue allows for remote exploitation, potentially compromising the integrity and availability of systems utilizing this library. Organizations using affected versions should prioritize patching or implementing mitigations, especially those in critical infrastructure or industrial control environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executing a manipulation of the argument DataLen can lead to memory corruption. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.