PT-2012-4436 · Arbiter · Arbiter Power Sentinel 1133A

Publicado 2012-09-05 · Atualizado 2012-09-13 · CVE-2012-3012

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421

Description The issue allows remote attackers to cause a denial of service, resulting in an Ethernet outage, via unspecified Ethernet traffic that fills a buffer. This can be demonstrated by a port scan.

Recommendations For the Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421, update the firmware to a version released after 11Jun2012 Rev 421 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-3012

Produtos afetados

Arbiter Power Sentinel 1133A

Referências · 3

• http://us-cert.gov/control_systems/pdf/ICSA-12-249-01.pdf · Nota
• http://arbiter.com/news/index.php?id=261 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3012 · Nota de Segurança