CVE-2026-124761: A DCP Set of the IP suite that is refused is still stored
P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and starts saving it, before the state of the device is checked. If the request is refused, for example because an Application Relationship is active, the configuration is not restored and is still saved. After a restart the device uses the refused address, and may not answer the controller or may use its address. A host with ADJACENT network access can use this while an Application Relationship is active.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
P-Netto a version that resolves this vulnerability.Fixed in 1.0.4
Event History
Frequently Asked Questions
Which P-Net versions are affected?
P-Net versions before 1.0.4 are affected.
What access does an attacker need?
An attacker needs adjacent network access. No privileges or user interaction are required, and exploitation requires an Application Relationship to be active.
What is the operational impact after exploitation?
After the device restarts, it may use the refused IP address. This can prevent it from answering its controller or cause it to use the controller's address.
How can I determine whether a device may already be affected?
Check whether a refused DCP Set request occurred while an Application Relationship was active, then inspect the device's address after a restart. An affected device may retain and use the refused address despite the request having been refused.
What is the available remediation?
Upgrade P-Net to version 1.0.4 or later.