CVE-2026-71254: falha crítica em debevv nanoMODBUS
nanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.6%
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The function validates that the total request size does not exceed 245 bytes and that each sub-request's record_length is at most 124, but it never validates the CUMULATIVE response size across all sub-requests before processing them.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
debevv · nanoMODBUSCVEs relacionadas — debevv nanoMODBUS
No mesmo produto, das mais perigosas para as menos.
CVE-2026-71256CRITICALnanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_idEPSS 0.6%CVE-2026-54410HIGHnanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length FieldEPSS 0.5%CVE-2026-71255HIGHnanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()EPSS 0.4%