PT-2026-132311
CVE-2026-111730
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
CVSS 4.0
7.2
HighMetricsAV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get check peer(). The received length (up to 255) was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end of the buffer. This can lead to a crash (denial of service) or potentially arbitrary code execution.
Requires establishment of session that needs ADJACENT network access.
Found an issue in the description? Have something to add? Feel free to write us 👾