CVE-2012-5409: Buffer Overflow
First published: Thu Nov 01 2012(Updated: )
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SiPass integrated | <=mp2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01
- http://ioactive.com/pdfs/SIEMENS_Sipass_Integrated_Ethernet_Bus_Arbitrary_Pointer_Dereference_V4.pdf
- http://secunia.com/advisories/50900
- http://www.osvdb.org/86129
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-938777.pdf
Frequently Asked Questions
What is the severity of CVE-2012-5409?
CVE-2012-5409 is rated as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2012-5409?
To fix CVE-2012-5409, update Siemens SiPass integrated MP2.6 or earlier to the latest patched version provided by the vendor.
What systems are affected by CVE-2012-5409?
CVE-2012-5409 affects Siemens SiPass integrated versions up to and including MP2.6.
What type of attack does CVE-2012-5409 allow?
CVE-2012-5409 allows attackers to send crafted IOCP RPC messages that can lead to arbitrary code execution on the affected system.
Is CVE-2012-5409 exploitable over the internet?
Yes, CVE-2012-5409 can be exploited remotely over an Ethernet network.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- vendor/siemens
- canonical/siemens sipass integrated
- version/siemens sipass integrated/mp2.6