Vendors / libmodbus Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 4
Exploited now libmodbus records in CISA KEV No libmodbus vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00728 · Published 2024-05-01 · No fix listed CWE-122
Priority HIGH 72
libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00606 · Published 2024-05-31 · No fix listed CWE-416
Priority HIGH 72
libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0079 · Published 2024-05-31 · No fix listed CWE-122
Priority HIGH 72
libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00524 · Published 2024-05-08 · No fix listed CWE-120
Priority MEDIUM 53
An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00475 · Published 2024-05-31 · No fix listed CWE-400
Priority MEDIUM 43
Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-02-27 · No fix listed CWE-121
Priority MEDIUM 43
An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01927 · Published 2019-07-31 · No fix listed CWE-125
Priority MEDIUM 43
An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01981 · Published 2019-07-31 · No fix listed CWE-125
Priority LOW 34
A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.0046 · Published 2022-08-29 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
4 4 1 0 0
THREATIST.IORead the docs