What’s Vulnerable › Vulnerabilities

CVE-2012-5409

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-11-01 · updated 2026-06-16
• Weakness: CWE-119

Description

AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack.

Affected products

• Siemens SiPass integrated: through mp2.6

References

• http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01
• http://ioactive.com/pdfs/SIEMENS_Sipass_Integrated_Ethernet_Bus_Arbitrary_Pointer_Dereference_V4.pdf
• http://secunia.com/advisories/50900
• http://www.osvdb.org/86129
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-938777.pdf
• http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01
• http://ioactive.com/pdfs/SIEMENS_Sipass_Integrated_Ethernet_Bus_Arbitrary_Pointer_Dereference_V4.pdf
• http://secunia.com/advisories/50900
• http://www.osvdb.org/86129
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-938777.pdf

Get alerted when CVE-2012-5409 or the next vulnerability affects your stack