CVE-2012-5409
Siemens SiPass integrated < mp2.6 - Remote Code Execution via IOCP RPC Message Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-5409. PoCs published by Lucas Apa.
AI-analyzed exploit summary The advisory describes a critical vulnerability in SIEMENS SiPass Integrated MP2.6 and earlier, where insufficient sanity checking in AscoServer.exe allows remote attackers to corrupt heap structures and dereference arbitrary pointers, leading to remote code execution under the SYSTEM account.
Description
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet network, which allows remote attackers to write data to any memory location and consequently execute arbitrary code via crafted messages, as demonstrated by an arbitrary pointer dereference attack or a buffer overflow attack.
Exploits (1)
The advisory describes a critical vulnerability in SIEMENS SiPass Integrated MP2.6 and earlier, where insufficient sanity checking in AscoServer.exe allows remote attackers to corrupt heap structures and dereference arbitrary pointers, leading to remote code execution under the SYSTEM account.