PT-2025-51173 · Snap7-Rs · Snap7-Rs

Published

2025-12-14

·

Updated

2025-12-15

·

CVE-2025-14673

CVSS v3.1
9.8
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions snap7-rs versions up to 1.142.1
Description A heap-based buffer overflow exists in the
snap7 rs::client::S7Client::as ct write
function located in the
/tests/snap7-rs/src/client.rs
file. The issue is remotely exploitable and the exploit has been publicly disclosed.
Recommendations Versions prior to 1.142.1 should be updated. As a temporary workaround, consider restricting access to the
snap7 rs::client::S7Client::as ct write
function until a patch is available.

Exploit

Fix

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

Related Identifiers

CVE-2025-14673

Affected Products

Snap7-Rs