CVE-2025-14672

HIGH

Gmg137 Snap7-rs < 1.142.1 - Memory Corruption

Title source: rule

Description

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7_micro_client.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

Exploits (1)

gitee 1 stars

by gmg137 · rustwriteup

https://gitee.com/gmg137/snap7-rs/issues/ID2H8E

References (4)

[Various Sources] https://gitee.com/gmg137/snap7-rs/

View Writeup ZIP pw:eip

[Exploit, Issue Tracking, Vendor Advisory] https://gitee.com/gmg137/snap7-rs/issues/ID2H8E

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.336401

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.336401

Scores

CVSS v3 7.3

EPSS 0.0009

EPSS Percentile 25.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-122 CWE-119

Status published

Products (1)

gmg137/snap7-rs < 1.142.1

Published Dec 14, 2025

Tracked Since Feb 18, 2026