PT-2025-51173 · Snap7-Rs · Snap7-Rs

Published 2025-12-14 · Updated 2025-12-15 · CVE-2025-14673

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1

Description A heap-based buffer overflow exists in the snap7 rs::client::S7Client::as ct write function located in the /tests/snap7-rs/src/client.rs file. The issue is remotely exploitable and the exploit has been publicly disclosed.

Recommendations Versions prior to 1.142.1 should be updated. As a temporary workaround, consider restricting access to the snap7 rs::client::S7Client::as ct write function until a patch is available.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2025-14673

Affected Products

Snap7-Rs

References · 10

• 🔥 https://gitee.com/gmg137/snap7-rs/issues/ID2H74 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14673 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14673 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2000282285782827154 · Twitter Post
• https://t.me/CVEtracker/39780 · Telegram Post
• https://vuldb.com/?id.336402 · Note
• https://vuldb.com/?ctiid.336402 · Note
• https://twitter.com/CVEnew/status/2000611262137528444 · Twitter Post
• https://t.me/cveNotify/145718 · Telegram Post
• https://gitee.com/gmg137/snap7-rs · Note