Read the docs
TI-2026-78160 Aliases CVE-2026-110322GHSA-889f-4xg2-rf68

HMS Networks PEAK-System PCAN Windows drivers untrusted pointer dereference

Priority LOW 29CWE-822Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-822 and the CVSS impact.

Summary

The PEAK-System PCAN type 0x4030 processing path does not validate a selected or returned object pointer before dereferencing fixed fields during post-processing (CWE-822, Untrusted Pointer Dereference). A local attacker with low privileges can cause a high impact to availability, with no confidentiality or integrity impact (CVSS 4.0 6.8, MEDIUM). Affected are PEAK-System Device Driver Setup through 5.1.2.1151 and PCAN Windows CAN device drivers through 5.1.2. CISA does not list the flaw in KEV, and its SSVC assessment shows no known exploitation.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00114 1st percentileScored 2026-11-07
Fix Fixed PEAK-System Device Driver Setup (HMS Networks): 5.1.4PCAN Windows CAN device drivers (HMS Networks): 5.1.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HMS NetworksPEAK-System Device Driver Setupup to 5.1.2.11515.1.4Patch availableCNA
HMS NetworksPCAN Windows CAN device driversup to 5.1.25.1.4Patch availableCNA
  • PEAK-System Device Driver Setup VendorHMS Networks Affected up to 5.1.2.1151 Fixed in 5.1.4 Patch available CNA
  • PCAN Windows CAN device drivers VendorHMS Networks Affected up to 5.1.2 Fixed in 5.1.4 Patch available CNA

Remediation

Update PEAK-System Device Driver Setup and PCAN Windows CAN device drivers to 5.1.4, the fixed version, as published by HMS Networks.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA PEAK-System Device Driver Setup (HMS Networks) Fixed in 5.1.4
  • Fix · CNA PCAN Windows CAN device drivers (HMS Networks) Fixed in 5.1.4

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-110322
  2. 2026-10-21 Alias added: GHSA-889f-4xg2-rf68
  3. 2026-10-22 Priority changed: MEDIUM → LOW
  4. 2026-10-30 CISA SSVC decision points changed

References

Other 4

  • TI-2024-08499 Authenticated remote code execution in HMS Networks Ewon Flexy 205 CVSS 4.0HIGH 8.6
  • TI-2025-00350 HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information CVSS 4.0MEDIUM 6.9
  • TI-2020-11349 HMS Industrial Networks AB eCatcher Stack-based Buffer Overflow CVSS 3.1CRITICAL 10.0
  • TI-2024-22369 A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing… CVSS 3.1CRITICAL 9.1
  • TI-2024-22366 Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10… CVSS 3.1HIGH 8.8
  • TI-2024-22364 Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10… CVSS 3.1HIGH 7.5
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences