PT-2012-3549 · Abb · Robotstudio Lite+6

Publicado 2012-04-18 · Atualizado 2017-12-20 · CVE-2012-1801

Positive Technologies (AI Summary)

CVSS v2.0

7.7

Alta

Vetor base

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite (affected versions not specified)

Description The issue is related to multiple stack-based buffer overflows in COM and ActiveX controls. This allows remote attackers to execute arbitrary code via crafted input data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-1801

Produtos afetados

Abb Webware Server

Interlink Module

Quickteach

Robotstudio Lite

Robotstudio S4

S4 Opc Server

Webware Sdk

Referências · 5

• http://secunia.com/advisories/48693 · Nota
• http://us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf · Nota
• http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/%24file/SI10231A2%20rev%200.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1801 · Nota de Segurança
• http://securityfocus.com/bid/52888 · Nota