CVE-2012-4924

EUVD-2012-4849
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
asusipswcom_activex_component
1.0.0.1
asusnet4switch
1.0.0020
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dsecrg.com/pages/vul/show.php?id=417
http://osvdb.org/79438
http://secunia.com/advisories/48125
http://www.exploit-db.com/exploits/18538
http://www.securityfocus.com/bid/52110
https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
http://dsecrg.com/pages/vul/show.php?id=417
http://osvdb.org/79438
http://secunia.com/advisories/48125
http://www.exploit-db.com/exploits/18538
http://www.securityfocus.com/bid/52110
https://exchange.xforce.ibmcloud.com/vulnerabilities/73384