HMS Networks PEAK-System PCAN Windows drivers

As cited

Copy frozen at 2026-10-20 19:25 UTC (site build).

vulnerabilities

HMS Networks PEAK-System PCAN Windows drivers

HMS Networks PEAK-System PCAN Windows drivers versions 5.1.2.1151 and earlier contain six vulnerabilities involving buffer overflows, improper array validation, and untrusted pointer dereferences that can crash the Windows kernel. The vulnerabilities affect both the device driver setup tool and CAN device drivers used in transportation, healthcare, energy, and critical manufacturing systems worldwide. HMS Networks has released version 5.1.4 to address these issues.

Why it matters: Organizations deploying PEAK-System PCAN drivers in critical infrastructure must urgently upgrade to version 5.1.4 to prevent kernel denial of service attacks via local exploitation requiring low privileges.

Source published

2026-10-20 12:00 UTC

First seen by Cybersecurity Tracker

2026-10-20 18:31 UTC