PT-2025-51171 · Snap7-Rs · Snap7-Rs

Published 2025-12-14 · Updated 2025-12-15 · CVE-2025-14672

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1

Description A flaw exists in snap7-rs up to version 1.142.1. The issue resides in the TSnap7MicroClient::opWriteArea function within the s7 micro client.cpp file, potentially leading to a heap-based buffer overflow. Remote attackers may be able to exploit this issue. An exploit for this issue has been published.

Recommendations Versions prior to 1.142.1 are recommended.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2025-14672

Affected Products

Snap7-Rs

References · 9

• 🔥 https://gitee.com/gmg137/snap7-rs/issues/ID2H8E · Exploit
• https://osv.dev/vulnerability/CVE-2025-14672 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14672 · Security Note
• https://t.me/CVEtracker/39779 · Telegram Post
• https://twitter.com/CVEnew/status/2000611263081275777 · Twitter Post
• https://vuldb.com/?ctiid.336401 · Note
• https://t.me/cveNotify/145717 · Telegram Post
• https://vuldb.com/?id.336401 · Note
• https://gitee.com/gmg137/snap7-rs · Note