CyberSecBulletin

Modbus Tools vulnerabilities

We track 3 vulnerabilities in Modbus Tools products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 30, 2022.

3vulnerabilities
0critical
3high
0exploited
7.7average CVSS score

Latest Modbus Tools vulnerabilities

  • 7.8 High severity

    Modbus Poll: Buffer Copy without Checking Size of Input

    CVE-2022-4857Modbus Tools

    A vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is some unknown functionality of the file mbpoll.exe of the component mbp File Handler. The manipulation leads to buffer overflow. The attack

  • 7.8 High severity

    Modbus Slave: Buffer Copy without Checking Size of Input

    CVE-2022-4856Modbus Tools

    A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow.

  • 7.5 High severity

    Modbus Slave: Out-of-bounds Write

    CVE-2022-1068Modbus Tools

    Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.