CVE-2025-1400 - Vulnerability Details - OpenCVE

Out-of-bounds Read vulnerability in unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0005.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Fixes

Solution

To fix this issue, it's suggested to update libplctag to v2.6.4

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1400

History

Mon, 14 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00032}`	epss `{'score': 0.00037}`

Wed, 07 May 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 07 May 2025 07:15:00 +0000

Type	Values Removed	Values Added
Description		Out-of-bounds Read vulnerability in unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.
Title		Out-of-bounds Read in libplctag library
Weaknesses		CWE-125
References		https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1400
Metrics		cvssV3_1 `{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: Nozomi

Published: 2025-05-07T07:04:29.943Z

Updated: 2025-05-07T14:02:31.645Z

Reserved: 2025-02-17T16:14:04.871Z

Link: CVE-2025-1400

Vulnrichment

Updated: 2025-05-07T13:45:42.950Z

NVD

Status : Awaiting Analysis

Published: 2025-05-07T07:15:50.263

Modified: 2025-05-07T14:13:20.483

Link: CVE-2025-1400

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-1400", "assignerOrgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "state": "PUBLISHED", "assignerShortName": "Nozomi", "dateReserved": "2025-02-17T16:14:04.871Z", "datePublished": "2025-05-07T07:04:29.943Z", "dateUpdated": "2025-05-07T14:02:31.645Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://github.com/libplctag/libplctag", "defaultStatus": "unaffected", "modules": ["unpack_response"], "packageName": "libplctag", "product": "libplctag", "programFiles": ["conn.c"], "repo": "https://github.com/libplctag/libplctag", "vendor": "libplctag", "versions": [{"lessThanOrEqual": "2.6.3", "status": "affected", "version": "2.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Gabriele Quagliarella"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Out-of-bounds Read vulnerability in <span style=\"background-color: rgb(255, 255, 255);\">unpack_response (conn.c) in</span> libplctag <span style=\"background-color: rgb(255, 255, 255);\">from 2.0 through 2.6.3 allows O</span>verread Buffers via network."}], "value": "Out-of-bounds Read vulnerability in\u00a0unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network."}], "impacts": [{"capecId": "CAPEC-540", "descriptions": [{"lang": "en", "value": "CAPEC-540 Overread Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "shortName": "Nozomi", "dateUpdated": "2025-05-07T07:04:29.943Z"}, "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1400"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "To fix this issue, it's suggested to update libplctag to v2.6.4<br>"}], "value": "To fix this issue, it's suggested to update libplctag to v2.6.4"}], "source": {"discovery": "UNKNOWN"}, "title": "Out-of-bounds Read in libplctag library", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-07T13:45:40.778148Z", "id": "CVE-2025-1400", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-07T14:02:31.645Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1400", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-07T13:45:40.778148Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-07T13:45:42.950Z"}}], "cna": {"title": "Out-of-bounds Read in libplctag library", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Gabriele Quagliarella"}], "impacts": [{"capecId": "CAPEC-540", "descriptions": [{"lang": "en", "value": "CAPEC-540 Overread Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/libplctag/libplctag", "vendor": "libplctag", "modules": ["unpack_response"], "product": "libplctag", "versions": [{"status": "affected", "version": "2.0", "versionType": "semver", "lessThanOrEqual": "2.6.3"}], "packageName": "libplctag", "programFiles": ["conn.c"], "collectionURL": "https://github.com/libplctag/libplctag", "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "To fix this issue, it's suggested to update libplctag to v2.6.4", "supportingMedia": [{"type": "text/html", "value": "To fix this issue, it's suggested to update libplctag to v2.6.4<br>", "base64": false}]}], "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1400"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Out-of-bounds Read vulnerability in\u00a0unpack_response (conn.c) in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network.", "supportingMedia": [{"type": "text/html", "value": "Out-of-bounds Read vulnerability in <span style=\"background-color: rgb(255, 255, 255);\">unpack_response (conn.c) in</span> libplctag <span style=\"background-color: rgb(255, 255, 255);\">from 2.0 through 2.6.3 allows O</span>verread Buffers via network.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "shortName": "Nozomi", "dateUpdated": "2025-05-07T07:04:29.943Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1400", "state": "PUBLISHED", "dateUpdated": "2025-05-07T14:02:31.645Z", "dateReserved": "2025-02-17T16:14:04.871Z", "assignerOrgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "datePublished": "2025-05-07T07:04:29.943Z", "assignerShortName": "Nozomi"}, "dataVersion": "5.1"}