{"id":"CVE-2012-5409","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-5409","generatedAt":"2026-11-05T08:00:56.669Z","title":"AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute…","description":"AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack.","published":"2012-11-01T10:44:48.000Z","lastModified":"2026-06-16T23:46:48.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":10,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cwe":["CWE-119"],"affected":["siemens/sipass integrated"],"epss":{"score":0.15788,"percentile":0.96884,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2012-11-01","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":22397,"kind":"exploit","title":"SIEMENS Sipass Integrated 2.6 Ethernet Bus - Arbitrary Pointer Dereference","url":"https://www.exploit-db.com/exploits/22397","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/22397.txt","file":"exploits/windows/dos/22397.txt","published":"2012-11-01","added":"2012-11-01","updated":"2012-11-01","author":"Lucas Apa","type":"dos","platform":"windows","port":null,"verified":false,"codes":["CVE-2012-5409","OSVDB-86129"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 15.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01","source":"cve@mitre.org"},{"url":"http://ioactive.com/pdfs/SIEMENS_Sipass_Integrated_Ethernet_Bus_Arbitrary_Pointer_Dereference_V4.pdf","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/50900","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.osvdb.org/86129","source":"cve@mitre.org"},{"url":"http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-938777.pdf","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-12-305-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ioactive.com/pdfs/SIEMENS_Sipass_Integrated_Ethernet_Bus_Arbitrary_Pointer_Dereference_V4.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/50900","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/86129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-938777.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-5409","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}