CVE-2026-78012— Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack

Quick assessment

Affected

Pyramid Solutions EtherNet/IP Adapter DLL Kit (EIPA)

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Pyramid Solutions EtherNet/IP Adapter DLL Kit是Pyramid Solutions公司的一款提供EtherNet/IP适配器功能的DLL工具包。 Pyramid Solutions EtherNet/IP Adapter DLL Kit v5.6.1之前版本存在缓冲区错误漏洞，该漏洞源于大型Class 3显式消息请求可能超出应用端接收缓冲区而不会生成错误或警告，可能导致内存损坏、设备崩溃或潜在远程攻击。

CVSS 9.8 · Critical EPSS 0.65% · P51 Updated Sep 05, 2026

Possible ATT&CK Techniques 3 AI

T1011 · Exfiltration Over Other Network Medium T1595 · Active Scanning T1073

Affected Version Matrix 16

Vendor	Product	Version Range	Status
Pyramid Solutions	EtherNet/IP Adapter Development Kit (EADK)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Adapter DLL Kit (EIPA)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Scanner Development Kit (ESDK)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE)	`< v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Scanner DLL Kit (EIPS)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected
Pyramid Solutions	EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE)	`≤ v5.6.1`	affected
		`v5.6.1`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-78012

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack

Source: CVE Program / CVE List V5

Vulnerability Description

An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

栈缓冲区溢出

Source: CVE Program / CVE List V5

Vulnerability Title

Pyramid Solutions EtherNet/IP Adapter DLL Kit 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Pyramid Solutions	EtherNet/IP Adapter DLL Kit (EIPA)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Adapter Development Kit (EADK)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Scanner DLL Kit (EIPS)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Scanner Development Kit (ESDK)	0 ~ v5.6.1	-
Pyramid Solutions	EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE)	0 ~ v5.6.1	-