Buffer overflow in Pyramid Solutions Ethernet/ip Adapter Development Kit (Eadk)
CVE-2026-78012
An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Pyramid Solutions Ethernet/ip Adapter Development Kit (Eadk)
- Pyramid Solutions Ethernet/ip Adapter Development Kit With Cip Security (Eadk-secure)
- Pyramid Solutions Ethernet/ip Adapter Dll Kit (Eipa)
- Pyramid Solutions Ethernet/ip Adapter Dll Kit With Cip Security (Eipa-secure)
- Pyramid Solutions Ethernet/ip Scanner Development Kit (Esdk)
- Pyramid Solutions Ethernet/ip Scanner Development Kit With Cip Security (Esdk-secure)
- Pyramid Solutions Ethernet/ip Scanner Dll Kit (Eips)
- Pyramid Solutions Ethernet/ip Scanner Dll Kit With Cip Security (Eips-secure)
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-78012?
- CVE-2026-78012 is a critical-severity vulnerability in Pyramid Solutions Ethernet/ip Adapter Development Kit (Eadk), classified under Stack-based Buffer Overflow. CVSS score: 9.8/10. Published 2026-09-01.
- How severe is CVE-2026-78012?
- Critical severity. CVSS v3 base score is 9.8 out of 10.