Our takeCISA reports that vulnerabilities in HMS Networks PEAK-System PCAN Windows drivers <=5.1.2.1151 are under active exploitation and can crash the Windows kernel. Update to a fixed version now.Security Resilience desk
Sources (3)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
- auscert_bulletins · auscert_bulletins
What this means for you — Security leader:Update PEAK-System PCAN Windows drivers past 5.1.2.1151 immediately. These kernel crashes are confirmed exploited in the wild per CISA; any Windows system with PCAN hardware is exposed.
What this means for you — Lean IT orgs:If you use PEAK-System PCAN hardware on any Windows PC, update the drivers past version 5.1.2 right away. CISA says these flaws are already being exploited and can crash the whole system.
What this means for you — MSP:Audit every client for PEAK-System PCAN Windows drivers <=5.1.2.1151 and push the update. CISA lists these as actively exploited; one affected endpoint can blue-screen the kernel.
What this means for you — Researcher:CISA confirms active exploitation of multiple kernel vulnerabilities in HMS Networks PEAK-System PCAN Windows drivers <=5.1.2.1151. Successful attacks lead to system crashes.