CVE-2012-0929

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/47723Not Applicable
http://www.securityfocus.com/bid/51605Third Party Advisory, VDB Entry
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdfBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/72588Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72589Third Party Advisory, VDB Entry
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03Third Party Advisory, US Government Resource
http://secunia.com/advisories/47723Not Applicable
http://www.securityfocus.com/bid/51605Third Party Advisory, VDB Entry
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdfBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/72588Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72589Third Party Advisory, VDB Entry
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03Third Party Advisory, US Government Resource

Timeline

Published: Jan 28, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-09306.1Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or CVE-2012-09319.8Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to CVE-2012-09324.3Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web scri CVE-2012-09332.6Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to injec CVE-2012-09347.5PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to ex CVE-2012-09357.5SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID paramete CVE-2012-09364.3Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x b CVE-2012-09375.0wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to ex CVE-2012-09386.5Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to e CVE-2012-09396.5Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission CVE-2012-09416.1Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote at CVE-2012-09427.5Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute ar