HMS Networks Releases Security Patch for PCAN Drivers
The update mitigates six vulnerabilities that could otherwise lead to Windows kernel crashes.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust that the industrial devices used in your community are adequately protected from cyberattacks?
HMS Networks has released an update for its PCAN Windows drivers to address six critical vulnerabilities. The update mitigates security flaws identified by CISA in versions 5.1.2 and earlier that could lead to kernel crashes.
Why it matters
These vulnerabilities highlight the ongoing need for rigorous patching in industrial control system components. Addressing these flaws prevents potential system instability caused by memory corruption issues.
The vulnerabilities are classified as CWE-787 Out-of-bounds Write, which can crash the Windows kernel. Users must update to driver version 5.1.4 to remediate the flaws found in build 5.1.2.1151 and earlier.
The players
HMS Networks
A Swedish company specializing in industrial communication and connectivity technology for control systems.
CISA
The Cybersecurity and Infrastructure Security Agency is the U.S. federal authority responsible for assessing and reporting on industrial control vulnerabilities.
The details
The vulnerabilities stem from an out-of-bounds write, a memory safety issue where a program writes data past the end or before the beginning of the intended buffer. This defect can corrupt adjacent memory, leading to kernel-level system crashes. While the exploit requires local access and cannot be triggered remotely, it poses a risk to system availability. Experts recommend isolating affected industrial control networks from general business traffic to prevent unauthorized local access.
Timeline
- 2026-10-20
CISA published the initial security advisory regarding these driver vulnerabilities.
The Tech Race
This release follows a recurring pattern in industrial security where vendors must rapidly patch drivers to maintain system integrity. The update proactively addresses risks before they are cataloged within the broader landscape of CISA monitored industrial threats.
System administrators managing industrial hardware should immediately update to version 5.1.4 to secure their Windows kernel environments. For additional defense, isolate control system networks from primary business networks using firewalls.
The takeaway
Maintaining driver updates is essential for preventing kernel-level instability in industrial environments. System owners should continue monitoring CISA advisories for further guidance on patch deployment status.
Further reading
Learn more about securing industrial control systems on our Cybersecurity page.
Source note: This article includes information reported by Cisa.
Live Poll
Do you trust that the industrial devices used in your community are adequately protected from cyberattacks?
