CVE-2026-111730 Details
Description
P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 255) was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end of the buffer. This can lead to a crash (denial of service) or potentially arbitrary code execution. Requires establishment of session that needs ADJACENT network access.
A vulnerability exists in P-Net versions prior to 1.0.3, where the LengthPeerStationName field of a CheckPeers block is not properly validated. This oversight allows a crafted block to write up to 15 bytes beyond the allocated 241-byte peer station name buffer, potentially leading to a crash or arbitrary code execution. The vulnerability requires an established session and adjacent network access.
Users are advised to upgrade to P-Net version 1.0.3 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 29, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf | 4b71179a-3b92-4a9d-b9fc-af8b8ed579ee | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | 4b71179a-3b92-4a9d-b9fc-af8b8ed579ee |
Affected Products
| Product | Versions |
|---|---|
| P-Net | < 1.0.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 29, 2026 | New CVE Received | 4b71179a-3b92-4a9d-b9fc-af8b8ed579ee |