CVE-2022-4856: A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the compone...

Summary

A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. Th...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
modbustools	modbus_slave	<= 7.5.1 `cpe:2.3:a:modbustools:modbus_slave::::::::`

Original advisory text

A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the compone...

A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217021 was assigned to this vulnerability.

References

https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/Modbus%... Exploit Patch Third Party Advisory
https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/poc/poc... Third Party Advisory
https://vuldb.com/?ctiid.217021 Third Party Advisory
https://vuldb.com/?id.217021 Third Party Advisory