CVE-2012-4924

2012-09-1517:55:07

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.942

Percentile

99.2%

JSON

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.

Affected configurations

Nvd

Node

asusipswcom_activex_componentMatch1.0.0.1

asusnet4switchMatch1.0.0020

VendorProductVersionCPE
asusipswcom_activex_component1.0.0.1cpe:2.3:a:asus:ipswcom_activex_component:1.0.0.1:*:*:*:*:*:*:*
asusnet4switch1.0.0020cpe:2.3:a:asus:net4switch:1.0.0020:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
asus	ipswcom_activex_component	1.0.0.1	cpe:2.3:a:asus:ipswcom_activex_component:1.0.0.1:::::::*
asus	net4switch	1.0.0020	cpe:2.3:a:asus:net4switch:1.0.0020:::::::*