Threats tagged 'ghsa-mpjp-g8wp-4mfr'

P-Net versions before 1.0.4 have a vulnerability where the IP configuration from a DCP Set request is saved to both current and non-volatile configurations before verifying the device state. If the request is refused, such as when an Application Relationship is active, the configuration is not reverted and remains saved. After a restart, the device uses the refused IP address, potentially causing communication issues with the controller or address conflicts. An attacker with adjacent network access can exploit this behavior while an Application Relationship is active.