Back
CVE-2012-4661
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA…
High9.0EPSS 4.0%
- Published
- Updated
- Reserved
- Assigned by
- cisco
Description
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2.34), 8.4 before 8.4(4.4), 8.5 before 8.5(1.13), and 8.6 before 8.6(1.3) and the Firewall Services Module (FWSM) 4.1 before 4.1(9) in Cisco Catalyst 6500 series switches and 7600 series routers might allow remote attackers to execute arbitrary code via a crafted DCERPC packet, aka Bug IDs CSCtr21359 and CSCtr27522.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High9.0 | AV:N/AC:M/Au:N/C:C/I:P/A:C |
- EPSS (exploitation in 30 days)
- 4.0% · top 9.4% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.0.
Weakness
Affected products
n/a
- affected n/a
References (6)
- 55863 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 20121010 Multiple Vulnerabilities in Cisco Firewall Services Module (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- 50857 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 86146 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20121010 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- cisco-fwsm-dcerpc-bo(79173) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2012-4661)Record last updated .