Vulnerability Description
Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Scalance S Firmware | <= 2.3.0 |
| Siemens | Scalance S602 | v2 |
| Siemens | Scalance S612 | v2 |
| Siemens | Scalance S613 | v2 |
Related Weaknesses (CWE)
References
- http://osvdb.org/81034
- http://support.automation.siemens.com/WW/view/en/59869684
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_secVendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdfUS Government Resource
- http://osvdb.org/81034
- http://support.automation.siemens.com/WW/view/en/59869684
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_secVendor Advisory
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdfUS Government Resource
FAQ
What is CVE-2012-1800?
CVE-2012-1800 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote atta...
How severe is CVE-2012-1800?
CVE-2012-1800 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1800?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Scalance S Firmware, Siemens Scalance S602, Siemens Scalance S612, Siemens Scalance S613.