PT-2012-3553 · Koyo · H2-Ecom-F+7

Published 2012-04-13 · Updated 2017-12-20 · CVE-2012-1805

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Koyo H0-ECOM versions (affected versions not specified) Koyo H0-ECOM100 versions (affected versions not specified) Koyo H2-ECOM versions (affected versions not specified) Koyo H2-ECOM-F versions (affected versions not specified) Koyo H2-ECOM100 versions (affected versions not specified) Koyo H4-ECOM versions (affected versions not specified) Koyo H4-ECOM-F versions (affected versions not specified) Koyo H4-ECOM100 versions (affected versions not specified)

Description A buffer overflow issue exists in the ECOM Ethernet module, allowing remote attackers to execute arbitrary code via long strings in unspecified parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-1805

Affected Products

H0-Ecom

H0-Ecom100

H2-Ecom

H2-Ecom-F

H2-Ecom100

H4-Ecom

H4-Ecom-F

H4-Ecom100

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-1805 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74875 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf · Note