This vulnerability in davenardella snap7 (versions up to 1.4.3) involves an out-of-bounds write in the TS7Worker::PerformFunctionRead function located in src/core/s7_server.cpp. The flaw allows an attacker with local network access to manipulate the ReadVar Request Handler, potentially causing memory corruption. Although an exploit has been published, the vendor has not yet responded or issued a fix. The CVSS 4.0 vector indicates the attack requires adjacent network access with low complexity and no privileges or user interaction needed, but with low to limited impact on confidentiality, integrity, and availability.

Successful exploitation can lead to out-of-bounds memory writes, which may cause application instability or crashes and potentially enable further exploitation such as code execution or denial of service. The attack requires local network access, limiting remote exploitation. The medium CVSS score reflects moderate risk due to these factors.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's advisories for updates. Until a fix is released, restrict local network access to the affected snap7 service to trusted users only and consider applying network-level controls to limit exposure.