Martin T

I am using a packet manupulator called Scapy as a client. It create custom packets, which I then excute towards the Snap7 server. Only seen this happen for ItemCount. Here is a sample Scapy script, which will crash the server. I run the script from a remote Lubuntu machine, while the Snap7 server is running on 192.168.0.9 under Windows 10. You can repoduce this by installing Scapy and running the script (adjust the IP accordingly): sudo apt-get install python-scapy sudo python scapy-script-name.py...

I am using a packet manupulator called Scapy as a client. It create custom packets, which I then excute towards the Snap7 server. Only seen this happen for ItemCount. Here is a sample Scapy script, which will crash the server. I run the script from a remote Lubuntu machine, while the Snap7 server is running on 192.168.0.9 under Windows 10. You can repoduce this by installing Scapy and running the script (adjust the IP accordingly): sudo apt-get install python-scapy python scapy-script-name.py Scapy...

No, I am using a packet manupulator called Scapy to create custom packets, which I then excute towards the Snap7 server. Here is a sample Scapy script, which will crash the server. I run the script from a remote Lubuntu machine, while the Snap7 server is running on 192.168.0.9 under Windows 10. You can repoduce this by installing Scapy and running the script (adjust the IP accordingly): sudo apt-get install python-scapy python scapy-script-name.py Scapy script: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15...

No, I am using a packet manupulator called Scapy to create custom packets, which I then excute towards the Snap7 server. Here is a sample Scapy script, which will crash the server. I run the script from a remote Lubuntu machine, while the Snap7 server is running on 192.168.0.9 under Windows 10. You can repoduce this by installing Scapy and running the script (adjust the IP accordingly): sudo apt-get install python-scapy python scapy-script-name.py Scapy script: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15...

Hi, OS: Windows 10 32bit Snap7 version: 1.4.1 The Snap7 Server (server.exe from the provided examples) is crashing when the ItemCount field of the ReadVariable, ReadVariableMultiple, WriteVariable or WriteVariableMultiple is provided with unexpected values. For example the value of 0x76 provided to the WriteVariable function will lead to the following exception: [INVALID]:0083dc2d add [eax],al from thread 3128 caused access violation when attempting to write to 0x00000000 CONTEXT DUMP EIP: 0083dc2d...

Hi, OS: Windows 10 32bit Snap7 version: 1.4.1 The Snap7 Server (server.exe from the provided examples) is crashing when the ItemCount field of the ReadVariable, ReadVariableMultiple, WriteVariable or WriteVariableMultiple is provided with unexpected values. For example the value of 0x76 provided to the WriteVariable function will lead to the following exception: [INVALID]:0083dc2d add [eax],al from thread 3128 caused access violation when attempting to write to 0x00000000 CONTEXT DUMP EIP: 0083dc2d...