Live › vulnerability › CVE-2026-111731
P-Net, a PROFINET device stack, loops forever when it handles a read request for the PDPortDataCheck record on subslot 0 (the whole module). The device stops responding, so an unauthenticated remote attacker can cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Industrial or automation devices built on P-Net before 1.0.3 that accept PROFINET read requests on the network. Systems where PROFINET traffic is kept off untrusted networks are less exposed; the sources do not say more.
No product ranges from the sources yet.
1.0.3 are affected1.0.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use this to cause a denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-111731")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.