CVE-2012-1801

ABB WebWare Server/SDK/Interlink/S4 OPC/QuickTeach/RobotStudio - RCE via Crafted Input

Title source: llm

Description

Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data.

References (4)

Core 4

Core References

US Government Resource x_refsource_misc

http://www.us-cert.gov/control_systems/pdf/ICSA-12-095-01A.pdf

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/48693

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/52888

Various Sources x_refsource_confirm

http://www05.abb.com/global/scot/scot348.nsf/veritydisplay/35df9dc4a94ae83ac12579ca0043acc1/%24file/SI10231A2%20rev%200.pdf

Scores

EPSS 0.0028

EPSS Percentile 51.8%

Details

CWE

CWE-119

Status published

Products (7)

abb/interlink_module

abb/quickteach

abb/robotstudio_lite

abb/robotstudio_s4

abb/s4_opc_server

abb/webware_sdk

abb/webware_server

Published Apr 18, 2012

Tracked Since Feb 18, 2026