CVE-2017-1000230
UnknownEPSS 1.03%
Last modified
CVE-2017-1000230 is a vulnerability of currently unknown severity. The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack.. EPSS estimates a 1.03% chance of exploitation in the next 30 days.
Description
The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Snap7 Project | Snap7 Server | 1.4.1 |
References
- https://sourceforge.net/p/snap7/discussion/bugfix/thread/2d2d085c/Third Party Advisory
- https://sourceforge.net/p/snap7/discussion/bugfix/thread/2d2d085c/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-1000230?
The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are provided with unexpected input, thus resulting in denial of service attack.
How severe is CVE-2017-1000230?
Severity scoring for CVE-2017-1000230 is pending analysis. The EPSS model estimates a 1.03% probability of exploitation in the next 30 days.
How do I fix CVE-2017-1000230?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-1000224CSRF in YouTube (WordPress plugin) could allow unauthenticat…
- CVE-2017-1000225Reflected XSS in Relevanssi Premium version 1.14.8 when usin…
- CVE-2017-1000226Stop User Enumeration 1.3.8 allows user enumeration via the …
- CVE-2017-1000227Stored XSS in Salutation Responsive WordPress + BuddyPress T…
- CVE-2017-1000228nodejs ejs versions older than 2.5.3 is vulnerable to remote…
- CVE-2017-1000229Integer overflow bug in function minitiff_read_info() of opt…
- CVE-2017-1000231A double-free vulnerability in parse.c in ldns 1.7.0 have un…
- CVE-2017-1000232A double-free vulnerability in str2host.c in ldns 1.7.0 have…
- CVE-2017-1000233Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-1000234I, Librarian version <=4.6 & 4.7 is vulnerable to Directory …5.3
- CVE-2017-1000235I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command…9.8
- CVE-2017-1000236I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected …6.1
Are you affected by CVE-2017-1000230?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST