CISA 2026-10-20

HMS Networks PEAK-System PCAN Windows drivers

Machine-generated analysis · WAYSCloud LLM

PEAK-System PCAN Windows drivers version 5.1.2 (or 5.1.2.1151) are vulnerable to kernel-crashing bugs. The advisory recommends upgrading to version 5.1.4.

Context

The advisory concerns HMS Networks’ PEAK-System PCAN Windows device drivers (Device Driver Setup ≤ 5.1.2.1151 and CAN device drivers ≤ 5.1.2). It states that multiple memory-corruption flaws could cause a Windows kernel crash. The advisory notes that the products are deployed worldwide and are used in transportation, healthcare, energy, and manufacturing sectors. HMS Networks has released version 5.1.4 that addresses the issues.

Operator considerations

Check: Verify installed PEAK-System PCAN driver versions are not older than 5.1.4.
Patch: Upgrade affected drivers to version 5.1.4 from the HMS Networks download page.
Log: Monitor Windows system logs for unexpected kernel crashes or driver-related errors.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of these vulnerabilities could crash the Windows kernel.

The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected:

PEAK-System Device Driver Setup

Read the full advisory on CISA →