CVE-2026-115793: fallo de gravedad alta en RT-Labs P-Net
Resource exhaustion from RPC sessions kept for requests to unknown interface
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.4%
P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does not start a timeout for it. Repeated requests with different activity UUIDs exhaust the available sessions. Once they are exhausted the device no longer answers new RPC requests, including Endpoint Mapper Lookup and Connect, until it is restarted. A remote unauthenticated attacker can use this to cause a denial of service.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
RT-Labs · P-NetCVEs relacionadas — RT-Labs P-Net
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-32399MEDIUMCVE-2025-32399EPSS 0.5%CVE-2025-32405HIGHCVE-2025-32405EPSS 0.5%CVE-2025-32400HIGHCVE-2025-32400EPSS 0.4%CVE-2025-32397HIGHCVE-2025-32397EPSS 0.4%CVE-2025-32396HIGHCVE-2025-32396EPSS 0.4%CVE-2026-112200HIGHResource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endiannessEPSS 0.4%