CVE-2025-32404
📋 TL;DR
An out-of-bounds write vulnerability in RT-Labs P-Net library allows attackers to corrupt memory in IO devices by sending malicious RPC packets. This affects industrial control systems and devices using P-Net version 1.0.1 or earlier for PROFINET communication.
💻 Affected Systems
- RT-Labs P-Net library
- Devices using P-Net for PROFINET communication
📦 What is this software?
P Net by Rt Labs
⚠️ Risk & Real-World Impact
Worst Case
Complete device compromise leading to denial of service, data corruption, or unauthorized control of industrial processes
Likely Case
Device crashes or unstable behavior causing production disruptions in industrial environments
If Mitigated
Limited impact with proper network segmentation and monitoring
🎯 Exploit Status
Exploitation requires sending specially crafted RPC packets to vulnerable devices
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 1.0.2 or later
Vendor Advisory: https://www.rt-labs.com/security-advisory
Restart Required: Yes
Instructions:
1. Check current P-Net version
2. Download patch from RT-Labs
3. Apply patch according to device manufacturer instructions
4. Restart affected devices
🔧 Temporary Workarounds
Network Segmentation
allIsolate PROFINET networks from other networks using firewalls
RPC Filtering
allBlock or filter RPC packets at network boundaries
🧯 If You Can't Patch
- Implement strict network segmentation for industrial control systems
- Deploy intrusion detection systems monitoring for abnormal RPC traffic
🔍 How to Verify
Check if Vulnerable:
Check P-Net library version on devices or contact device manufacturerCheck Version:
Device-specific - consult manufacturer documentationVerify Fix Applied:
Verify P-Net version is 1.0.2 or later and test RPC functionality📡 Detection & Monitoring
Log Indicators:
- Device crashes
- Memory access errors
- Unusual RPC packet patterns
Network Indicators:
- Malformed RPC packets
- Unusual PROFINET traffic patterns
SIEM Query:
source="industrial_network" AND (protocol="PROFINET" OR protocol="RPC") AND packet_size>threshold