CVE-2026-111731: Infinite loop when reading PDPortDataCheck record of subslot 0
P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use this to cause a denial of service.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
P-Netto a version that resolves this vulnerability.Fixed in 1.0.3
Event History
Frequently Asked Questions
Which deployments are exposed to this denial of service?
Deployments using P-Net versions before 1.0.3 are affected when they process read requests for the PDPortDataCheck record targeting subslot 0, which represents the whole module.
What does an attacker need to exploit the issue?
An attacker only needs network access sufficient to send the crafted read request. No authentication, user interaction, or special privileges are required.
What is the operational impact of a successful attack?
The affected device enters an infinite loop because its port iteration does not advance. The request never completes and the device stops responding.