gmg137

7 exploits Active since Jul 2025
CVE-2025-15247 GITEE HIGH rust
Gmg137 Snap7-rs - Memory Corruption
A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
1 stars
CVSS 7.3
CVE-2025-14672 GITEE HIGH rust
Gmg137 Snap7-rs < 1.142.1 - Memory Corruption
A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7_micro_client.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
1 stars
CVSS 7.3
CVE-2025-14673 GITEE HIGH rust
Gmg137 Snap7-rs < 1.142.1 - Memory Corruption
A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as_ct_write of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
1 stars
CVSS 7.3
CVE-2025-7616 GITEE MEDIUM rust
gmg137 snap7-rs <1.142.1 - Memory Corruption
A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function pthread_cond_destroy of the component Public API. The manipulation leads to memory corruption. The exploit has been disclosed to the public and may be used.
1 stars
CVSS 5.5
CVE-2025-14672 WRITEUP HIGH WORKING POC
Gmg137 Snap7-rs < 1.142.1 - Memory Corruption
A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7_micro_client.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS 7.3
CVE-2025-14673 WRITEUP HIGH WORKING POC
Gmg137 Snap7-rs < 1.142.1 - Memory Corruption
A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as_ct_write of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS 7.3
CVE-2025-15247 WRITEUP HIGH WORKING POC
Gmg137 Snap7-rs - Memory Corruption
A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
CVSS 7.3