CVE-2022-1068

MEDIUM

modbustools/modbus_slave < 7.4.3 - Stack-based Buffer Overflow in Registration Field

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-1068. PoCs published by webraybtl.

AI-analyzed exploit summary The repository contains a minimal PoC for CVE-2022-1068, a Modbus Slave buffer overflow vulnerability. The provided Python script generates a 736-byte payload but lacks exploitation logic or network interaction.

Description

Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.

Exploits (1)

nomisec STUB 3 stars
by webraybtl · poc
https://github.com/webraybtl/CVE-2022-1068

The repository contains a minimal PoC for CVE-2022-1068, a Modbus Slave buffer overflow vulnerability. The provided Python script generates a 736-byte payload but lacks exploitation logic or network interaction.

Classification
Stub 80%
Attack Type
Dos
Complexity
Trivial
Reliability
Theoretical
Target: Modbus Slave (version unspecified)
No auth needed
Prerequisites: Access to write a file to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Patch, Third Party Advisory, US Government Resource x_refsource_confirm
https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-04

Scores

CVSS v3 5.5
EPSS 0.0096
EPSS Percentile 56.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-121 CWE-787
Status published
Products (1)
modbustools/modbus_slave < 7.4.3
Published Apr 01, 2022
Tracked Since Feb 18, 2026