NULL Pointer Dereference in RT-Labs P-Net Affects Industrial IoT Devices
CVE-2025-32398

7.5HIGH

Key Information:

Vendor

Rt-labs

Status
P-net
Vendor
CVE Published:
7 May 2025

What is CVE-2025-32398?

A vulnerability in RT-Labs P-Net versions 1.0.1 and prior can be exploited by an attacker to crash industrial IoT devices. This occurs when a malformed RPC packet is handled, leading to a NULL Pointer Dereference that disrupts device operation. Such vulnerabilities pose significant risks in industrial environments, making it critical for affected users to implement recommended security measures.

Affected Version(s)

P-Net 0 <= 1.0.1

References

https://www.nozominetworks.com/labs/vulnerability-advisor...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks.
.