Remote Procedure Call Vulnerability in P-Net by RT Labs

CVE-2026-115793

What is CVE-2026-115793?

The P-Net application by RT Labs is susceptible to a vulnerability that affects its handling of Remote Procedure Call (RPC) sessions. Specifically, versions prior to 1.0.3 fail to release allocated RPC sessions for requests targeting unknown interfaces or object UUIDs. This oversight allows an unauthenticated remote attacker to initiate repeated requests with distinct activity UUIDs, leading to session exhaustion. When the maximum allowed RPC sessions are consumed, the device halts its response to new RPC requests, including essential processes like Endpoint Mapper Lookup and Connect, necessitating a restart to restore functionality.

References