PT-2025-51171 · Snap7-Rs · Snap7-Rs

Published 2025-12-14 · Updated 2025-12-15 · CVE-2025-14672

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1

Description A flaw exists in snap7-rs up to version 1.142.1. The issue resides in the

TSnap7MicroClient::opWriteArea

function within the

s7 micro client.cpp

file, potentially leading to a heap-based buffer overflow. Remote attackers may be able to exploit this issue. An exploit for this issue has been published.

Recommendations Versions prior to 1.142.1 are recommended.

Exploit

Fix

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-122

Related Identifiers

CVE-2025-14672

Affected Products

Snap7-Rs

References · 8

• 🔥 https://gitee.com/gmg137/snap7-rs/issues/ID2H8E · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14672 · Security Note
• https://vuldb.com/?ctiid.336401 · Note
• https://gitee.com/gmg137/snap7-rs · Note
• https://t.me/CVEtracker/39779 · Telegram Post
• https://twitter.com/CVEnew/status/2000611263081275777 · Twitter Post
• https://vuldb.com/?id.336401 · Note
• https://t.me/cveNotify/145717 · Telegram Post