Remote Procedure Call Vulnerability in P-Net by RT-Labs
CVE-2026-124762

6MEDIUM

Key Information:

Vendor

Rt-labs

Status
P-net
Vendor
CVE Published:
13 November 2026

What is CVE-2026-124762?

The vulnerability in P-Net prior to version 1.0.4 relates to its handling of RPC sessions. The system identifies RPC sessions solely by their activity UUID. This flawed design allows an attacker with adjacent network access to observe the activity UUID in communications, enabling them to terminate an Application Relationship prematurely. The issue stems from the device's inability to verify whether a received PDU is a valid response to a previous call, thereby making it susceptible to unauthorized session management actions.

Affected Version(s)

P-Net 0 < 1.0.4

P-Net 1.0.4

References

https://rt-labs.com/wp-content/uploads/2026/11/RRTL-26110...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aditya Gupta (Attify - attify.com)
.