What’s Vulnerable › Vulnerabilities

CVE-2012-1800

• Severity: medium (CVSS 6.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-04-18 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame.

Affected products

• Siemens SCALANCE S602: v2
• Siemens SCALANCE S612: v2
• Siemens Scalance S613: v2
• Siemens Scalance S Firmware: through 2.3.0; 2.1.0, 2.2.0

References

• http://osvdb.org/81034
• http://support.automation.siemens.com/WW/view/en/59869684
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf
• http://osvdb.org/81034
• http://support.automation.siemens.com/WW/view/en/59869684
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdf

Get alerted when CVE-2012-1800 or the next vulnerability affects your stack