Vulnerabilities > CVE-2022-1068 - Out-of-bounds Write vulnerability in Modbustools Modbus Slave

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

modbustools

CWE-787

NVD

Published: 2022-04-01

Updated: 2022-04-12

Summary

Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.

Vulnerable Configurations

Part	Description	Count
Application	Modbustools Modbustools Modbus Slave 1.0 Modbustools Modbus Slave 2.0 Modbustools Modbus Slave 3.0 Modbustools Modbus Slave 3.1 Modbustools Modbus Slave 3.1. Modbustools Modbus Slave 3.1.4 Modbustools Modbus Slave 3.1.5 Modbustools Modbus Slave 3.10A Modbustools Modbus Slave 4.0.0 Modbustools Modbus Slave 4.1.0 Modbustools Modbus Slave 4.2.0 Modbustools Modbus Slave 4.2.1 Modbustools Modbus Slave 4.2.2 Modbustools Modbus Slave 4.3.0 Modbustools Modbus Slave 4.3.1 Modbustools Modbus Slave 4.4.0 Modbustools Modbus Slave 4.4.1 Modbustools Modbus Slave 4.4.2 Modbustools Modbus Slave 4.4.3 Modbustools Modbus Slave 4.4.4 Modbustools Modbus Slave 4.4.5 Modbustools Modbus Slave 4.4.6 Modbustools Modbus Slave 4.4.7 Modbustools Modbus Slave 4.5.0 Modbustools Modbus Slave 4.5.1 Modbustools Modbus Slave 4.6.0 Modbustools Modbus Slave 4.6.1 Modbustools Modbus Slave 5.0.0 Modbustools Modbus Slave 6.0.0 Modbustools Modbus Slave 6.0.1 Modbustools Modbus Slave 6.0.2 Modbustools Modbus Slave 6.0.3 Modbustools Modbus Slave 6.1.0 Modbustools Modbus Slave 6.1.1 Modbustools Modbus Slave 6.1.2 Modbustools Modbus Slave 6.1.3 Modbustools Modbus Slave 6.2.0 Modbustools Modbus Slave 7.0.0 Modbustools Modbus Slave 7.1.0 Modbustools Modbus Slave 7.1.1 Modbustools Modbus Slave 7.1.2 Modbustools Modbus Slave 7.2.0 Modbustools Modbus Slave 7.2.1 Modbustools Modbus Slave 7.3.0	44

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-04