CVE-2012-5409: Buffer Overflow
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5409?
CVE-2012-5409 is rated as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2012-5409?
To fix CVE-2012-5409, update Siemens SiPass integrated MP2.6 or earlier to the latest patched version provided by the vendor.
What systems are affected by CVE-2012-5409?
CVE-2012-5409 affects Siemens SiPass integrated versions up to and including MP2.6.
What type of attack does CVE-2012-5409 allow?
CVE-2012-5409 allows attackers to send crafted IOCP RPC messages that can lead to arbitrary code execution on the affected system.
Is CVE-2012-5409 exploitable over the internet?
Yes, CVE-2012-5409 can be exploited remotely over an Ethernet network.