snap7 vulnerabilities

2 known vulnerabilities in snap7 from Davenardella. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  snap7: Out-of-bounds Write

  CVE-2026-115723Oct 23, 2026Davenardella

  Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer addres

• 7.4 High severity

  snap7: Out-of-bounds Write

  CVE-2026-111280Oct 15, 2026Davenardella

  snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field. Rogue or impersonated PLCs can return crafted ReadVar responses ca