{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/peak-system-device-driver-setup-5.1.2.1151/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-101103"},{"id":"CVE-2026-103672"},{"id":"CVE-2026-105960"},{"id":"CVE-2026-109576"},{"id":"CVE-2026-110322"},{"id":"CVE-2026-94188"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["PEAK-System Device Driver Setup (\u003c=5.1.2.1151)","PCAN Windows CAN device drivers (\u003c=5.1.2)"],"_cs_severities":["medium"],"_cs_tags":["industrial-control-systems","denial-of-service","driver-vulnerability"],"_cs_type":"advisory","_cs_vendors":["HMS Networks"],"content_html":"\u003cp\u003eHMS Networks has identified multiple critical security vulnerabilities affecting the PEAK-System Device Driver Setup (versions 5.1.2.1151 and earlier) and PCAN Windows CAN device drivers (versions 5.1.2 and earlier). These vulnerabilities, including out-of-bounds write (CWE-787), buffer overflow (CWE-120), and improper pointer dereferencing, arise from flaws in input handling, length parameter validation, and array indexing within the driver IOCTL and write paths. An attacker with local access to a system running these drivers can exploit these flaws by sending specifically crafted input to the driver, resulting in a denial-of-service condition via a Windows kernel crash. This represents a significant risk for systems integrated within critical infrastructure sectors, including energy, transportation, and manufacturing, where the stability of CAN bus communications is paramount.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities leads to a Windows kernel crash, resulting in a denial-of-service for the affected host and the associated industrial control system process. These drivers are globally deployed in critical sectors such as Transportation, Healthcare, Energy, and Critical Manufacturing. If the driver is hosting a critical control process, a crash could lead to a temporary loss of industrial process visibility or control.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade all instances of the PEAK-System Device Driver Setup and PCAN Windows CAN device drivers to version 5.1.4 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit systems in critical infrastructure environments for the presence of PEAK-System drivers to determine exposure, focusing on hosts connected to CAN bus interfaces.\u003c/li\u003e\n\u003cli\u003eRestrict local access to systems with these drivers installed to prevent unauthorized users from interacting with the vulnerable driver IOCTL paths.\u003c/li\u003e\n\u003cli\u003eMonitor system event logs for unexpected kernel-mode crashes or bug checks that correlate with software using the PEAK-System interface.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-20T17:31:22Z","date_published":"2026-10-20T17:31:22Z","id":"https://feed.craftedsignal.io/briefs/2026-10-hms-networks-peak-system-drivers/","summary":"Multiple memory corruption and validation vulnerabilities in HMS Networks PEAK-System Windows drivers allow local attackers to induce a system kernel crash.","title":"HMS Networks PEAK-System Windows Drivers Multiple Vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-10-hms-networks-peak-system-drivers/"}],"language":"en","title":"CraftedSignal Threat Feed - PEAK-System Device Driver Setup (\u003c=5.1.2.1151)","version":"https://jsonfeed.org/version/1.1"}