Pyramid Solutions NetStaX EtherNet/IP Stack Prone to Critical Memory Corruption

Industrial automation environments face critical availability and reliability risks following a security advisory concerning the Pyramid Solutions NetStaX EtherNet/IP Stack. The impacted components—including the EtherNet/IP Adapter DLL Kit (EIPA), the Adapter Development Kit (EADK), and their CIP Security equivalents—are widely utilized by operational technology equipment manufacturers.

The vulnerability involves abnormal packet processing that can lead to underlying memory corruption. Crucially, the target equipment may crash or expose remote attack vectors without the originating device receiving standard Common Industrial Protocol (CIP) error notifications, concealing the anomalous activity from operators.

Operational Impact on Automation Systems

Because EtherNet/IP communication is vital for industrial machinery and programmable automation controllers, unexpected device crashes can paralyze physical assembly lines, utilities, or critical manufacturing units. Exploitation could allow unauthenticated remote attackers on the local industrial subnet to induce complete denial-of-service (DoS) conditions, creating unsafe physical environments and costly production halts.

Protective Measures and Incident Prevention

FORTSECURE GLOBAL emphasizes a defense-in-depth approach to shield vulnerable industrial protocol stacks:

• Segment Industrial Networks: Implement strict network micro-segmentation aligned with the ISA/IEC 62443 standard and NIST SP 800-82 guidelines to isolate EtherNet/IP devices from general corporate networks.
• Deploy Deep Packet Inspection (DPI): Utilize OT-aware firewalls and intrusion detection systems to inspect CIP and EtherNet/IP protocol communications for malformed or unauthorized commands.
• Coordinate with Equipment Vendors: Work with downstream equipment vendors integrating NetStaX stacks to obtain validated firmware patches and deploy them in planned maintenance windows.

---

แหล่งที่มา: CISA Cybersecurity Advisories เผยแพร่ครั้งแรก: Thu, 03 Sep 26 12:00:00 +0000 บทความต้นฉบับ: อ่านต้นฉบับ