What is GHSA-c87p-2q2j-cwwp?

GHSA-c87p-2q2j-cwwp is a security advisory published by GitHub Security Advisories with High severity. The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP...

Which CVE IDs does GHSA-c87p-2q2j-cwwp cover?

GHSA-c87p-2q2j-cwwp covers the following CVE IDs: CVE-2020-22552. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c87p-2q2j-cwwp?

GHSA-c87p-2q2j-cwwp has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-c87p-2q2j-cwwpHighCVSS 7.5

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-22552 →

📋 Description

The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-22552
http://snap7.com
https://sourceforge.net/p/snap7/discussion/bugfix/thread/456d76fdde
https://sourceforge.net/projects/snap7
https://github.com/advisories/GHSA-c87p-2q2j-cwwp