CVE-2012-1800

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame.

Score

CVSS 2.0 6.1 Medium

Status

Modified - cret@cert.org

Published

2012-04-18

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Scalance S602 (Siemens)
• Scalance S612 (Siemens)
• Scalance S613 (Siemens)
• Scalance S Firmware (Siemens)

References

• http://osvdb.org/81034
• http://support.automation.siemens.com/WW/view/en/59869684
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf