Buffer Overflow Vulnerability in PEAK-System PCAN Diagnostic Tool
CVE-2026-101103

6.8MEDIUM

Key Information:

Vendor

Hms Networks

Status
Peak-system Device Driver Setup
Pcan Windows Can Device Drivers
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101103?

A buffer overflow vulnerability exists in the PEAK-System PCAN diagnostic tool, leading to potential exploitation if the output buffer provided by the caller fails to meet the necessary size requirements. This flaw can allow attackers to manipulate the application, resulting in unexpected behavior or system instability. Users should ensure that they are operating on the latest versions of the tool and follow recommended security practices to mitigate any risks associated with this vulnerability.

Affected Version(s)

PCAN Windows CAN device drivers 0 <= 5.1.2

PEAK-System Device Driver Setup 0 <= 5.1.2.1151

PCAN Windows CAN device drivers 5.1.4

References

https://www.hms-networks.com/cybersecurity
https://www.peak-system.com/support/downloads/software/
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Seyeon Bang reported this vulnerability to CISA.
.