Live › vulnerability › CVE-2026-111734
P-Net is an embedded PROFINET stack whose Ethernet receive routine reads past the end of the receive buffer when a frame is truncated or made only of VLAN tags. An attacker on the network can crash the device or read memory contents.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Systems that embed P-Net, the PROFINET device stack used in industrial controllers and field devices, on a network an attacker can reach. Teams that do not ship or run P-Net-based PROFINET devices can skip it. The sources do not say which products bundle P-Net.
No product ranges from the sources yet.
1.0.3 are affected.1.0.3 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags and the PROFINET FrameID. The VLAN tag loop had no upper bound, so a truncated frame, or a frame consisting only of VLAN tags, makes the function read past the end of the receive buffer. This can cause a crash (denial of service) or disclose memory content.
This page as .md · .json · in your agent: get_signal("CVE-2026-111734")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.