CVE-2012-1801

Severity: high (CVSS 7.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-04-18 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data.

Affected products

ABB Interlink Module: all versions
ABB Quickteach: all versions
ABB Robotstudio Lite: all versions
ABB Robotstudio S4: all versions
ABB S4 Opc Server: all versions
ABB Webware Sdk: all versions
ABB Webware Server: all versions

References

http://secunia.com/advisories/48693
http://www.securityfocus.com/bid/52888
http://www.us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf
http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/%24file/SI10231A2%20rev%200.pdf
http://secunia.com/advisories/48693
http://www.securityfocus.com/bid/52888
http://www.us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf
http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/%24file/SI10231A2%20rev%200.pdf

Get alerted when CVE-2012-1801 or the next vulnerability affects your stack