PT-2026-146839
CVE-2026-124759
·
Published
2026-11-13
·
Updated
2026-11-13
Description by
CVSS 4.0
7.1
HighMetricsAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Application Relationship with a single alarm ERROR frame, or deliver forged alarm notifications with chosen type, slot, subslot, USI and payload to the application.
Found an issue in the description? Have something to add? Feel free to write us 👾