IP Configuration Vulnerability in P-Net by RT-Labs

CVE-2026-124761

What is CVE-2026-124761?

The vulnerability in P-Net prior to version 1.0.4 involves improper handling of IP address configurations during DCP Set requests. If a request is denied, such as when an Application Relationship is active, the device fails to revert to its previous configuration. Upon subsequent restarts, the device retains the refused IP address, which may result in communication failures with controllers or potentially improper address usage. This scenario poses security risks for any host with adjacent network access, especially when active relationships are in place. Effective mitigation and awareness of this flaw are critical for maintaining robust network security.

References