What is the CVSS score of CVE-2012-4691?

CVE-2012-4691 has a CVSS 2.0 base score of 3.3 (Low). CVSS vector: AV:A/AC:L/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 0.1%.

Automation License Manager CVE-2012-4691

LOW

Resource Management Errors (CWE-399)

2012-12-18 ics-cert@hq.dhs.gov

Siemens Denial Of Service Automation License Manager

3.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:A/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Adjacent

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Dec 18, 2012 - 12:30 cve.org

LOW 3.3

DescriptionCVE.org

Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.

AnalysisAI

Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-399. Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets. Affected products include: Siemens Automation License Manager. Version information: before 5.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.