PT-2026-45924 · Mbs · Double-A Profibus+17

Adrien Rey + 1 · Published 2026-06-03 · Updated 2026-06-04 · CVE-2026-35083

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A remote attacker with user privileges can exploit a stack buffer overflow in the bac-deviceobject() method to gain full system access as root. A stack buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially allowing the execution of arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-35083

Affected Products

Double-A Profibus

Double-A X-Link

Double-X Can

Double-X Dali

Double-X Knx

Double-X Lon

Double-X M-Bus

Double-X Profinet

Double-X X-Link

Single-A

Single-X

Triple-X Knx+Dali

Triple-X Knx+Lon

Triple-X Knx+M-Bus

Triple-X Profinet+Dali

Triple-X Profinet+Knx

Triple-X Profinet+Lon

Triple-X Profinet+M-Bus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-35083 · Security Note
• https://certvde.com/en/advisories/VDE-2026-039 · Note
• https://t.me/CVEtracker/55705 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1twrsss/critical_cve202635083_vulnerability_exposes · Reddit Post