CVE-2026-78012: falha crítica em Pyramid Solutions EtherNet/IP Adapter…
Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar EtherNet/IP Adapter Development Kit+ Monitorar EtherNet/IP Adapter DLL Kit
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.6%
An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Pyramid Solutions · EtherNet/IP Adapter Development Kit (EADK)Pyramid Solutions · EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE)Pyramid Solutions · EtherNet/IP Adapter DLL Kit (EIPA)Pyramid Solutions · EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE)Pyramid Solutions · EtherNet/IP Scanner Development Kit (ESDK)Pyramid Solutions · EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE)Pyramid Solutions · EtherNet/IP Scanner DLL Kit (EIPS)Pyramid Solutions · EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE)CVEs relacionadas — Pyramid Solutions EtherNet/IP Adapter…
No mesmo produto, das mais perigosas para as menos.