Beveiligingsadvies

CVE-2026-13197

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-14 15:01:39

Laatst bijgewerkt 2026-08-14 19:45:18

Toegewezen door Nozomi

CVSS-score 7.3

Status PUBLISHED

Beschrijving

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to trigger use-after-free and invalid pointer dereferences on kernel configuration objects, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests through the piControl character device.

← Alle CVE's bekijken Bekijk op cve.org ↗