Stack-based Buffer Overflow in Cisco Adaptive Security Appliances and Catalyst Switches
CVE-2012-4661
Currently unrated
Key Information:
- Vendor
- Cisco
- Status
- Vendor
- CVE Published:
- 29 October 2012
Summary
A stack-based buffer overflow has been identified in the DCERPC inspection engine found in Cisco Adaptive Security Appliances (ASA) 5500 series and Catalyst 6500 series devices. This vulnerability allows remote attackers to potentially execute arbitrary code by sending a specially crafted DCERPC packet. It affects various software versions across multiple products, demonstrating critical implications for network security and device integrity. Proper security measures and prompt updates are necessary to mitigate the risk associated with this vulnerability.
References
EPSS Score
9% chance of being exploited in the next 30 days.
Timeline
Vulnerability published
Vulnerability Reserved