Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-78012— Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack

Quick assessment

Affected
Pyramid Solutions EtherNet/IP Adapter DLL Kit (EIPA)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NetStaX EtherNet/IP 协议栈在 v5.6.1 之前的版本存在一个问题：较大的 Class 3 显式报文（explicit-message）请求可能会导致应用层接收缓冲区溢出，而不会生成错误或缺陷警告。其后果可能是内存损坏、设备崩溃，或者形成一个潜在的远程攻击向量，且源设备不会收到 CIP 错误提示，表明该请求无法被正常处理。

CVSS 9.8 · Critical
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-78012

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack
Source: CVE Program / CVE List V5
Vulnerability Description
An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Pyramid Solutions EtherNet/IP Adapter DLL Kit (EIPA) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Adapter Development Kit (EADK) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Scanner DLL Kit (EIPS) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Scanner Development Kit (ESDK) 0 ~ v5.6.1 -
Pyramid Solutions EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE) 0 ~ v5.6.1 -

II. Public POCs for CVE-2026-78012

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-78012

请登录查看更多情报信息。

Other References for CVE-2026-78012 (1)

IV. Related Vulnerabilities

Same vendor: Pyramid Solutions
Same weakness: CWE-121

V. Comments for CVE-2026-78012

No comments yet

Leave a comment