CVE-2026-29972 - Vulnerability Analysis

Overview

nanoMODBUS through v1.22.0 contains a stack-based buffer overflow caused by improper validation of byte_count in recv_read_registers_res(), letting a malicious Modbus TCP server cause buffer overflow and potentially remote code execution, exploit requires a malicious server response.

Severity & Score

Impact

A malicious Modbus TCP server can cause buffer overflow leading to potential remote code execution on the client system.

Mitigation

Update nanoMODBUS to a version later than v1.22.0 or the latest available version.

References

• https://gist.github.com/dwilliams27/a4e26fe747c8561d608f7549804bd85f
• https://github.com/debevv/nanoMODBUS
• https://github.com/debevv/nanoMODBUS/blob/master/nanomodbus.c#L580-L615

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner