CVE-2012-1802

Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a malformed URL.

• CWE-119

• http://osvdb.org/81032
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdfUS Government Resource
• http://osvdb.org/81032
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-130874.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-04.pdfUS Government Resource

Published

Apr 18, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1796Unspecified vulnerability in IBM Tivoli Monitoring Agent (IT…
• CVE-2012-1797IBM DB2 9.5 uses world-writable permissions for nodes.reg, w…
• CVE-2012-1798The TIFFGetEXIFProperties function in coders/tiff.c in Image…6.5
• CVE-2012-1799The web server on the Siemens Scalance S Security Module fir…
• CVE-2012-1800Stack-based buffer overflow in the Profinet DCP protocol imp…
• CVE-2012-1801Multiple stack-based buffer overflows in (1) COM and (2) Act…
• CVE-2012-1803RuggedCom Rugged Operating System (ROS) 3.10.x and earlier h…
• CVE-2012-1804The OPC server in Progea Movicon before 11.3 allows remote a…
• CVE-2012-1805Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM,…
• CVE-2012-1806The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECO…
• CVE-2012-1807Cross-site scripting (XSS) vulnerability in the web server i…
• CVE-2012-1808The web server in the ECOM Ethernet module in Koyo H0-ECOM, …