CVE Watch9 jul 2026

CVE-2020-22552

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No an

CVSS

7.5

Alto

EPSS

1.5%

p71

KEV

—

Exploit Today

0-100

Publicado: 28 oct 2020 · Última mod.: 9 jul 2026

EPSS · 30d

1.5%EPSS · 30 días2.0%

2026-06-302026-07-16

Descripción técnica

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed.

Referencias oficiales

sourceforge.nethttps://sourceforge.net/p/snap7/discussion/bugfix/thread/456d76fdde/
sourceforge.nethttps://sourceforge.net/projects/snap7/
sourceforge.nethttps://sourceforge.net/p/snap7/discussion/bugfix/thread/456d76fdde/
sourceforge.nethttps://sourceforge.net/projects/snap7/

CVEs relacionados

Sin CVEs relacionados por CWE o producto.