PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
Fix
Vendor advisories in the News 1
- HMS Networks PEAK-System PCAN Windows drivers CISA ICS Advisories · 2026-10-20
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
In the news 1
Change history 3
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-22 17:36
- StatusReceived → PublishedNVD modified 2026-10-20 20:28
- First seenCVSS 6.8NVD modified 2026-10-20 21:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.