Buffer overflow in Davenardella Snap7
CVE-2026-15105
A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7_server.cpp of the component ReadVar Request Handler. This manipulation causes out-of-bounds write. The attack requires access to the local network. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability class: Buffer Overflow
EPSS: 0.003 (18.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Davenardella Snap7 — versions 1.4.0, 1.4.1, 1.4.2
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (issue-tracking)
- cna@vuldb.com (exploit)
- cna@vuldb.com (product)
Frequently asked questions
- What is CVE-2026-15105?
- CVE-2026-15105 is a medium-severity vulnerability in Davenardella Snap7, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 6.3/10. Published 2026-07-08.
- How severe is CVE-2026-15105?
- Medium severity. CVSS v3 base score is 6.3 out of 10.