CVE-2012-4661

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-10-29 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco 7600 Router: all versions
Cisco ASA Software: 8.3(1), 8.3(2), 8.4, 8.4(1), 8.4(1.11), 8.4(2) (+6)
Cisco Catalyst 6500: all versions
Cisco Catalyst 6503-E: all versions
Cisco Catalyst 6504-E: all versions
Cisco Catalyst 6506-E: all versions
Cisco Catalyst 6509-E: all versions
Cisco Catalyst 6509-Neb-A: all versions
Cisco Catalyst 6509-V-E: all versions
Cisco Catalyst 6513: all versions
Cisco Catalyst 6513-E: all versions

References

Get alerted when CVE-2012-4661 or the next vulnerability affects your stack