Code injection

2020-10-2814:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

64.5%

JSON

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed.

CPENameOperatorVersion
snap7eq1.4.1

CPE	Name	Operator	Version
	snap7	eq	1.4.1

References

snap7.com

sourceforge.net/p/snap7/discussion/bugfix/thread/456d76fdde/

sourceforge.net/projects/snap7/

0.002 Low

EPSS

Percentile

64.5%

JSON

Related for PRION:CVE-2020-22552