Lucene search

K
cveCertccCVE-2012-2598
HistoryJun 08, 2012 - 6:55 p.m.

CVE-2012-2598

2012-06-0818:55:02
CWE-119
certcc
web.nvd.nist.gov
30
cve-2012-2598
buffer overflow
siemens
wincc 7.0 sp3
web server
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7

Confidence

High

EPSS

0.001

Percentile

51.0%

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input.

Affected configurations

Nvd
Node
siemenswinccMatch7.0sp3
OR
siemenswinccMatch7.0sp3update_1
OR
siemenswinccMatch7.0sp3update_2
VendorProductVersionCPE
siemenswincc7.0cpe:2.3:a:siemens:wincc:7.0:sp3:*:*:*:*:*:*
siemenswincc7.0cpe:2.3:a:siemens:wincc:7.0:sp3:update_1:*:*:*:*:*
siemenswincc7.0cpe:2.3:a:siemens:wincc:7.0:sp3:update_2:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7

Confidence

High

EPSS

0.001

Percentile

51.0%

Related for CVE-2012-2598