CVE-2012-1800

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service (device outage) or possibly execute arbitrary code via a crafted DCP frame.

• CWE-119

• http://osvdb.org/81034
• http://support.automation.siemens.com/WW/view/en/59869684
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdfUS Government Resource
• http://osvdb.org/81034
• http://support.automation.siemens.com/WW/view/en/59869684
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-268149.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-05.pdfUS Government Resource

Published

Apr 18, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1792Cross-site scripting (XSS) vulnerability in osCommerce/OM/Co…
• CVE-2012-1795webglimpse.cgi in Webglimpse before 2.20.0 allows remote att…
• CVE-2012-1796Unspecified vulnerability in IBM Tivoli Monitoring Agent (IT…
• CVE-2012-1797IBM DB2 9.5 uses world-writable permissions for nodes.reg, w…
• CVE-2012-1798The TIFFGetEXIFProperties function in coders/tiff.c in Image…6.5
• CVE-2012-1799The web server on the Siemens Scalance S Security Module fir…
• CVE-2012-1801Multiple stack-based buffer overflows in (1) COM and (2) Act…
• CVE-2012-1802Buffer overflow in the embedded web server on the Siemens Sc…
• CVE-2012-1803RuggedCom Rugged Operating System (ROS) 3.10.x and earlier h…
• CVE-2012-1804The OPC server in Progea Movicon before 11.3 allows remote a…
• CVE-2012-1805Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM,…
• CVE-2012-1806The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECO…