Pyramid Solutions NetStaX Stack Buffer Overflow CVE-2026-78012 Advisory

Summary of Key Vulnerability Information Vulnerability Overview Vulnerability Name: Pyramid Solutions NetStaX EtherNet/IP Stack Stack-based Buffer Overflow CVE ID: CVE-2026-78012 CVSS Score: 9.8 (High Severity) Risk Description: Successful exploitation of this vulnerability may lead to memory corruption, device crashes, or establish a potential remote attack vector, with the affected device not receiving a CIP error message. Affected Scope Affected Products: The following versions of Pyramid Solutions NetStaX EtherNet/IP Stack: - EtherNet/IP Adapter DLL Kit (EIPA) - EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE) - EtherNet/IP Adapter Development Kit (EADK) - EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE) - EtherNet/IP Scanner DLL Kit (EIPS) - EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE) - EtherNet/IP Scanner Development Kit (ESDK) - EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE) Affected Industries: Critical manufacturing, energy, water and wastewater, chemicals Deployment Region: Global Company Headquarters: United States Remediation Recommended Practices: - Minimize the network attack surface by placing the control system network and remote devices behind firewalls and segmenting them from the corporate network. - When remote access is required, adopt more secure solutions (such as VPN) and ensure the VPN software is updated to the latest version. - Perform appropriate impact analysis and risk assessment before deploying mitigation measures. - Implement a defense-in-depth strategy, referring to the CISA Technical Information Document ICS-TIP-12-146-01B. - Upon discovering suspicious malicious activity, report to CISA according to internal procedures to facilitate tracking and correlation with other incidents. Current Status: As of the publication date, there are no public reports indicating that this vulnerability has been exploited in the wild. POC / Exploit Code The page does not include POC code or exploit code blocks.

Goal Reached Thanks to every supporter — we hit 100%!

Pyramid Solutions NetStaX Stack Buffer Overflow CVE-2026-78012 Advisory