Threats tagged 'ghsa-p9h8-2384-wvpg'

P-Net versions before 1.0.4 have a vulnerability in how they identify RPC sessions by activity UUID only. An attacker on an adjacent network who can observe the activity UUID, which is transmitted in cleartext, can send a single PDU to abort an Application Relationship without verifying the source or context. Additionally, the system may allocate sessions for unknown activity UUIDs and alter stored session addresses.