CVE-2022-4856

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217021 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Modbus Tools	Modbus Slave	7.5.0; 7.5.1

References

https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/Modbus%20Slave%20(version%207.5.1%20and%20earlier)%20mbs%20file%20has%20a%20buffer%20overflow%20vulnerability.mdExploit, Patch, Third Party Advisory
https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/poc/poc.mbsThird Party Advisory
https://vuldb.com/?ctiid.217021Third Party Advisory
https://vuldb.com/?id.217021Third Party Advisory
https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/Modbus%20Slave%20(version%207.5.1%20and%20earlier)%20mbs%20file%20has%20a%20buffer%20overflow%20vulnerability.mdExploit, Patch, Third Party Advisory
https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Slave/poc/poc.mbsThird Party Advisory
https://vuldb.com/?ctiid.217021Third Party Advisory
https://vuldb.com/?id.217021Third Party Advisory

Timeline

Published: Dec 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-485607.5A use-after-free exists in Python through 3.9 via heappushpop in heapq.CVE-2022-485646.5read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malforme CVE-2022-485659.8An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML CVE-2022-485665.9An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the CVE-2022-48577.8A vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is some unknown functi CVE-2022-485707.5Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to mem CVE-2022-485717.5memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.CVE-2022-485753.5A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue CVE-2022-485775.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be able to access user-CVE-2022-485787.1An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may CVE-2022-485797.5UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.CVE-2022-48587.5Insertion of Sensitive Information into Log Files in M-Files Server before 22.10.11846.0 could allow to obtain sensitive tokens from logs, i