Live › vulnerability › CVE-2026-111733
P-Net, an industrial Profinet device stack, dereferences a NULL AR pointer when it receives an implicit read request without a valid target AR UUID for an AR-specific record index. A remote attacker without credentials can send such a request to crash the device, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Devices built on P-Net before 1.0.3 that accept Profinet connections from the network are exposed to a remote crash. Systems that do not expose Profinet to untrusted networks have a smaller exposure. The sources do not say which vendor products embed P-Net.
No product ranges from the sources yet.
unknown if the sources do not say how to read it1.0.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that requires an AR (AR specific indices 0xE000-0xEFFF, and the expected identification data of a slot or subslot). A remote unauthenticated attacker can send such a request to crash the device (denial of service).
This page as .md · .json · in your agent: get_signal("CVE-2026-111733")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.