💣Exploit CVE-2024-34244 - libmodbus v3.1.10 is vulnerable to Buffer Overflow

[Maksim]

CVE ID : CVE-2024-34244
Published : May 8, 2024, 5:15 p.m. | 32 minutes ago
Description : libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially crafted input, which leads to out-of-bounds read and can potentially cause a crash or other unintended behaviors.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.

 

[ROOT]

# exploit/windows/remote/cve_2024_34244.rb
class MetasploitModule < Msf::Exploit::Remote
Rank = ExcellentRanking

include Msf::Exploit::Remote::Tcp

def initialize(info = {})
super(update_info(info,
'Name' => 'CVE-2024-34244 Exploit',
'Description' => %q{
This module exploits a vulnerability in [Affected System]
},
'Author' => 'E1.Coders',
'License' => MSF_LICENSE,
'References' =>
[
[ 'CVE', '2024-34244' ]
],
'DefaultOptions' =>
{
'EXITFUNC' => 'process'
},
'Payload' =>
{
'Space' => 1024,
'BadChars' => "\x00\x0a\x0d\x20"
},
'Platform' => 'win',
'Targets' =>
[
[ 'Windows XP SP3', { 'Ret' => 0x41414141 } ]
],
'DefaultTarget' => 0,
'DisclosureDate' => '2024-05-11'))

register_options(
[
Opt::RPORT(1234)
])
end

def exploit
# Exploit code goes here
end
end

 

[BOP]

# exploit/windows/remote/cve_2024_34244.rb
class MetasploitModule < Msf::Exploit::Remote
Rank = ExcellentRanking

include Msf::Exploit::Remote::Tcp

def initialize(info = {})
super(update_info(info,
'Name' => 'CVE-2024-34244 Exploit',
'Description' => %q{
This module exploits a vulnerability in [Affected System]
},
'Author' => 'E1.Coders',
'License' => MSF_LICENSE,
'References' =>
[
[ 'CVE', '2024-34244' ]
],
'DefaultOptions' =>
{
'EXITFUNC' => 'process'
},
'Payload' =>
{
'Space' => 1024,
'BadChars' => "\x00\x0a\x0d\x20"
},
'Platform' => 'win',
'Targets' =>
[
[ 'Windows XP SP3', { 'Ret' => 0x41414141 } ]
],
'DefaultTarget' => 0,
'DisclosureDate' => '2024-05-11'))

register_options(
[
Opt::RPORT(1234)
])
end

def exploit
# Exploit code goes here
end
end

Thank you for this POC