Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade wireshark-gnomeUpgrade wireshark | Dec 1, 2016 | Apr 1, 2009 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Apr 1, 2009 |
| Freebsd | — | Upgrade tetherealUpgrade tethereal-liteUpgrade wiresharkUpgrade ethereal-liteUpgrade etherealUpgrade wireshark-lite | Dec 10, 2025 | May 9, 2009 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Oct 30, 2017 | Apr 1, 2009 |
| Oracle_linux | — | Upgrade wiresharkUpgrade wireshark-gnome | Oct 16, 2024 | Apr 1, 2009 |
| Suse | — | Upgrade libwscodecs1Upgrade wireshark-develUpgrade libwiretap15Upgrade libwireshark18Upgrade libwiretap16Upgrade libwireshark8Upgrade wiresharkUpgrade libwsutil16Upgrade libwireshark9Upgrade libwsutil8Upgrade libwiretap7Upgrade libwsutil17Upgrade libwiretap6Upgrade libwsutil7Upgrade wireshark-ui-qtUpgrade wireshark-gtkUpgrade libwireshark19 | Feb 17, 2015 | Jun 28, 2013 |
| Wireshark | — | Upgrade to Wireshark version 1.0.7 | Oct 4, 2017 | Apr 1, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub