Pyramid Solutions NetStaX EtherNet/IP Stack
CISA flags critical CVE-2026-78012 (CVSS 9.8) stack buffer overflow in Pyramid Solutions NetStaX EtherNet/IP stacks below v5.6.1, risking crashes or remote attack vectors.
CISA republished Pyramid Solutions' advisory for CVE-2026-78012, a CWE-121 stack-based buffer overflow in the NetStaX EtherNet/IP stack versions prior to 5.6.1, scored CVSS 9.8. Large Class 3 explicit-message requests can exceed the application-side receive buffer without generating a CIP error, potentially causing memory corruption, device crashes, or a silent remote attack vector. All eight adapter and scanner DLL/development kit variants, including CIP Security editions, are affected across critical manufacturing, energy, water, and chemical sectors. No public exploitation has been reported.
- CVE-2026-78012 (CVSS 9.8) is a stack-based buffer overflow in NetStaX below 5.6.1
- Oversized Class 3 explicit messages overflow the receive buffer without a CIP error
- May cause memory corruption, device crashes, or a silent remote attack vector
- All eight kit variants, including CIP Security editions, are affected; upgrade to 5.6.1+
- CVEs
- CVE-2026-78012
- Vendors
- Pyramid Solutions
- Products
- NetStaX EtherNet/IP Stack
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-78012 | Stack buffer overflow in Pyramid Solutions NetStaX EtherNet/IP Stack | 9.3 | <1% |
From the original article
3 min read at cisa.govView CSAF Summary Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.