Priority HIGH 69
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field.
davenardella
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
davenardella records in CISA KEVNo davenardella vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-13566 CVE-2026-16225 · GHSA-cc6f-5g4h-cf75
davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write
Priority MEDIUM 57
A security flaw has been discovered in davenardella snap7 up to 1.4.3.
TI-2026-12717 CVE-2026-15105 · GHSA-x9cg-5m94-27cv
davenardella snap7 ReadVar Request s7_server.cpp PerformFunctionRead out-of-bounds write
Priority MEDIUM 57
A flaw has been found in davenardella snap7 up to 1.4.3.
TI-2026-61586 CVE-2026-90572 · GHSA-xrq6-q643-mcv3
davenardella snap7 s7_micro_client.cpp opUpload memory corruption
Priority MEDIUM 56
A vulnerability was determined in davenardella snap7 up to 1.4.3.
TI-2026-79727 CVE-2026-115723 · GHSA-m2jh-hr35-v8vp
Out-of-bounds write in Snap7 lets connected peers overflow buffers
Priority LOW 36
Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length.