Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-78012: Pyramid NetStaX Ethernet/IP Stack can crash when overloaded
CVE-2026-78012 · published 2 days ago
Summary
The NetStaX Ethernet/IP software used in some devices may lose track of large data requests, leading to corrupted memory or a crash. This can happen without the device reporting an error, potentially opening a way for remote attacks. Updating to version 5.6.1 or later resolves the issue.
What to do
- Update pyramid solutions ethernet/ip scanner development kit with cip security (esdk-secure) to version v5.6.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| pyramid solutions | ethernet/ip adapter dll kit (eipa) | <= v5.6.1 |
| pyramid solutions | ethernet/ip adapter dll kit with cip security (eipa-secure) | <= v5.6.1 |
| pyramid solutions | ethernet/ip adapter development kit (eadk) | <= v5.6.1 |
| pyramid solutions | ethernet/ip adapter development kit with cip security (eadk-secure) | <= v5.6.1 |
| pyramid solutions | ethernet/ip scanner dll kit (eips) | <= v5.6.1 |
| pyramid solutions | ethernet/ip scanner dll kit with cip security (eips-secure) | <= v5.6.1 |
| pyramid solutions | ethernet/ip scanner development kit (esdk) | <= v5.6.1 |
| pyramid solutions | ethernet/ip scanner development kit with cip security (esdk-secure) | < v5.6.1 |
Original advisory text
Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack
An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
Severity
9.3
Critical
CVSS 3.1: 9.8 (NVD)
CVSS 4.0: 9.3 (NVD)
Exploitation
EPSS <1%
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published1 Sep 2026
Updated2 Sep 2026
First seen1 Sep 2026
Monitor software like this
Free during beta