What is the CVSS score of CVE-2012-4661?

CVE-2012-4661 has a CVSS 2.0 base score of 9.0 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:P/A:C. EPSS exploitation probability: 9.7%.

Adaptive Security Appliance Software CVE-2012-4661

CRITICAL

Buffer Overflow (CWE-119)

2012-10-29 psirt@cisco.com

Buffer Overflow RCE Cisco Adaptive Security Appliance Software 5500 Series Adaptive Security Appliance 7600 Router Catalyst 6500 Catalyst 6503 E Catalyst 6504 E Catalyst 6506 E Catalyst 6509 E Catalyst 6509 Neb A Catalyst 6509 V E Catalyst 6513 Catalyst 6513 E

9.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.0 CRITICAL

AV:N/AC:M/Au:N/C:C/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:P/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 29, 2012 - 20:55 cve.org

CRITICAL 9.0

DescriptionCVE.org

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522. Affected products include: Cisco Adaptive Security Appliance Software, Cisco 5500 Series Adaptive Security Appliance, Cisco 7600 Router, Cisco Catalyst 6500, Cisco Catalyst 6503-E. Version information: before 8.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.