CVE-2024-10918

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.

CVSS v3 4.8 MEDIUM

4.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-10918	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:libmodbus:libmodbus:3.1.10:*:*:*:*:*:*:*

History

29 Apr 2025, 16:58

Type	Values Removed	Values Added
CWE		CWE-787
References	~~() https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-10918 -~~	() https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-10918 - Third Party Advisory
Summary		(es) La vulnerabilidad de desbordamiento de búfer basada en pila en libmodbus v3.1.10 permite desbordar el búfer asignado para la respuesta Modbus si la función intenta responder a una solicitud Modbus con una longitud inesperada.
First Time		Libmodbus libmodbus Libmodbus
CPE		cpe:2.3:a:libmodbus:libmodbus:3.1.10:::::::*

27 Feb 2025, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-27 12:15

Updated : 2025-04-29 16:58

NVD link : CVE-2024-10918

Mitre link : CVE-2024-10918

CVE.ORG link : CVE-2024-10918

JSON object : View

Products Affected

libmodbus

libmodbus

CWE

CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2024-10918", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "prodsec@nozominetworks.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 2.5, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-02-27T12:15:33.807", "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-10918", "tags": ["Third Party Advisory"], "source": "prodsec@nozominetworks.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "prodsec@nozominetworks.com", "description": [{"lang": "en", "value": "CWE-121"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an\nunexpected length."}, {"lang": "es", "value": "La vulnerabilidad de desbordamiento de b\u00fafer basada en pila en libmodbus v3.1.10 permite desbordar el b\u00fafer asignado para la respuesta Modbus si la funci\u00f3n intenta responder a una solicitud Modbus con una longitud inesperada."}], "lastModified": "2025-04-29T16:58:54.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:libmodbus:libmodbus:3.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "524EB0BF-4994-4369-BD85-CC578548CA1C"}], "operator": "OR"}]}], "sourceIdentifier": "prodsec@nozominetworks.com"}