Threats tagged 'ghsa-q647-2g3c-gqwj'

P-Net versions before 1.0.3 contain a vulnerability where RPC sessions allocated for requests naming unknown interfaces or object UUIDs are not released and no timeout is started. An unauthenticated remote attacker can exploit this by sending repeated requests with different activity UUIDs to exhaust available sessions, causing the device to stop responding to new RPC requests until it is restarted, resulting in a denial of service.