Infinite Loop Vulnerability in freemodbus by cwalter-at
CVE-2025-51986

7.5HIGH

Key Information:

Vendor

cwalter-at

Status
freemodbus
Vendor
CVE Published:
14 August 2025

What is CVE-2025-51986?

An infinite loop vulnerability in the demo/LINUXTCP implementation of freemodbus allows attackers to exploit crafted packet length values. This can lead to a denial-of-service condition, severely impacting the availability and functionality of affected systems. Administrators are urged to review their implementations and mitigate possible exploit paths to enhance security.

References

https://gist.github.com/jyjsunny/a9743a718ed3081b034c1120...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.