Buffer Overflow Vulnerability in P-Net by Rittal
CVE-2026-111730

7.2HIGH

Key Information:

Vendor

Rt-labs

Status
P-net
Vendor
CVE Published:
29 October 2026

What is CVE-2026-111730?

The P-Net software, prior to version 1.0.3, contains a buffer overflow vulnerability within the get_check_peer() function. This issue arises due to the improper validation of the LengthPeerStationName field in a CheckPeers block. When a crafted block is processed, the software may copy excessive data into a restricted 241-byte buffer, which can overwrite adjacent memory, potentially leading to a denial of service and the execution of arbitrary code. This vulnerability necessitates adjacent network access to exploit, emphasizing the importance of securing network perimeters.

Affected Version(s)

P-Net 0 < 1.0.3

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-26101...

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Willows
f0rw4rd (quellsec.dev)
.