Lucene search

K
cve[email protected]CVE-2012-4924
HistorySep 15, 2012 - 5:55 p.m.

CVE-2012-4924

2012-09-1517:55:07
CWE-119
web.nvd.nist.gov
19
cve-2012-4924
buffer overflow
cxdbgprint
ipswcom.dll
activex
asus net4switch
remote code execution
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.942 High

EPSS

Percentile

99.2%

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.

Affected configurations

NVD
Node
asusipswcom_activex_componentMatch1.0.0.1
OR
asusnet4switchMatch1.0.0020

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.942 High

EPSS

Percentile

99.2%

Related for CVE-2012-4924