PT-2012-3549 · Abb · Robotstudio Lite+6

Published 2012-04-18 · Updated 2017-12-20 · CVE-2012-1801

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite (affected versions not specified)

Description The issue is related to multiple stack-based buffer overflows in COM and ActiveX controls. This allows remote attackers to execute arbitrary code via crafted input data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-1801

Affected Products

Abb Webware Server

Interlink Module

Quickteach

Robotstudio Lite

Robotstudio S4

S4 Opc Server

Webware Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-1801 · Security Note
• http://secunia.com/advisories/48693 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf · Note
• http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/%24file/SI10231A2%20rev%200.pdf · Note
• http://securityfocus.com/bid/52888 · Note