CVE:CVE-2012-1800
CNNVD:CNNVD-201204-415
Siemens SCALANCE S Security Module可用于保护以太网所有设备免受无授权访问。
Siemens Scalance S Security Module firewall S602 V2，S612 V2和S613 V2 with firmware 2.3.0.3之前版本中的Profinet DCP协议实施中存在基于栈的缓冲区溢出漏洞。远程攻击者可利用该漏洞借助特制DCP框架导致拒绝服务（设备中断）或者执行任意代码。
solution:Upgrade siemens scalance_s_firmware to a higher version than 2.3.0,2.1.0,2.2.0,and avoid the version (,2.3.0],2.1.0,2.2.0; Upgrade siemens scalance_s602 to a higher version than v2,and avoid the version v2; Upgrade siemens scalance_s612 to a higher version than v2,and avoid the version v2; Upgrade siemens scalance_s613 to a higher version than v2,and avoid the version v2