PT-2022-28141 · Unknown · Modbus Tools Modbus Slave

Webray.Com.Cn · Published 2022-12-30 · Updated 2024-05-17 · CVE-2022-4856

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Modbus Tools Modbus Slave versions up to 7.5.1

Description A critical issue has been found in the mbs File Handler component, specifically in the file mbslave.exe, leading to a buffer overflow. This can be exploited remotely. The issue affects an unknown functionality of the file.

Recommendations For versions up to 7.5.1, consider disabling the mbslave.exe file or restricting access to the mbs File Handler component until a patch is available. As a temporary workaround, avoid using the affected functionality of the file mbslave.exe to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-4856

Affected Products

Modbus Tools Modbus Slave

References · 9

• 🔥 https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/Modbus%20Slave%20(version%207.5.1%20and%20earlier)%20mbs%20file%20has%20a%20buffer%20overflow%20vulnerability.md · Exploit
• 🔥 https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/poc/poc.mbs · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4856 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4856 · Vendor Advisory
• https://t.me/cvenotify/41606 · Telegram Post
• https://vuldb.com/?id.217021 · Note
• https://t.me/cvenotify/41001 · Telegram Post
• https://t.me/cibsecurity/55547 · Telegram Post
• https://vuldb.com/?ctiid.217021 · Note