CVE-2026-78012

CRITICAL9.8Pubblicata il 1 settembre 2026

An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.

Punteggio CVSS9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tipo di debolezza (CWE)CWE-121

NetStaX EtherNet/IP, buffer overflow critico nei kit Pyramid Solutions: aggiornare alla versione 5.6.1

Buffer overflow critico CVE-2026-78012 nello stack NetStaX EtherNet/IP: crash via rete senza autenticazione. Otto kit vulnerabili, aggiorna alla v5.6.1.

5 set 20266 min di letturaLeggi

This product uses the NVD API but is not endorsed or certified by the NVD.

Database CVE

Articoli correlati

NetStaX EtherNet/IP, buffer overflow critico nei kit Pyramid Solutions: aggiornare alla versione 5.6.1