Pyramid Solutions vulnerabilities

Products

• EtherNet/IP Adapter Development Kit (EADK) 2
• EtherNet/IP Adapter DLL Kit (EIPA) 2
• EtherNet/IP Scanner DLL Kit (EIPS) 2
• EtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE) 1
• EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE) 1
• EtherNet/IP Scanner Development Kit (EDKS) 1
• EtherNet/IP Scanner Development Kit (ESDK) 1
• EtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE) 1
• EtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE) 1

Latest Pyramid Solutions CVEs

Newest publication first

1. CVE-2026-78012 Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack

   Published 2026-09-01

   Critical·CVSS 9.3 EPSS 0.65%

   An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack...

2. CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

   Published 2022-07-12

   High·CVSS 7.5 EPSS 1.3%

   Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.