CVE-2026-124759
Alarm frames are accepted from any source address
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Application Relationship with a single alarm ERROR frame, or deliver forged alarm notifications with chosen type, slot, subslot, USI and payload to the application.
| CWE | CWE-346 |
| Vendor | rt-labs |
| Product | p-net |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for rt-labs p-net
Be the first to know when new unknown vulnerabilities affecting rt-labs p-net are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
RT-Labs / P-Net
0 < 1.0.4 1.0.4 < *
References
Credits
Aditya Gupta (Attify - attify.com)