CyberRota Analysis
AI-GeneratedA race condition vulnerability in the configuration and process-image management of KUNBUS piControl version 2.6.2 allows local authenticated attackers to exploit improper synchronization, leading to use-after-free and invalid pointer dereferences. This can result in kernel memory corruption and denial of service. Organizations using this version of KUNBUS piControl should prioritize remediation to mitigate potential disruptions and security risks.
Original NVD Description
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to trigger use-after-free and invalid pointer dereferences on kernel configuration objects, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests through the piControl character device.