P-Net versions before 1.0.4 have a vulnerability where the alarm receiver state is set to waiting for confirmation before parsing alarm notification data. If parsing fails, the state is not restored, causing subsequent alarms of the same priority to be discarded without acknowledgment until the Application Relationship is released. This issue requires the attacker to have adjacent network access and an established Application Relationship context.