CVE-2026-111733
NULL pointer dereference on implicit read of AR specific record index
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that requires an AR (AR specific indices 0xE000-0xEFFF, and the expected identification data of a slot or subslot). A remote unauthenticated attacker can send such a request to crash the device (denial of service).
| CWE | CWE-476 |
| Vendor | rt-labs |
| Product | p-net |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for rt-labs p-net
Be the first to know when new unknown vulnerabilities affecting rt-labs p-net are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
RT-Labs / P-Net
0 < 1.0.3
References
Credits
f0rw4rd (quellsec.dev)