Sign-up

ID

VAR-201209-0219


CVE

CVE-2012-3012


TITLE

Arbiter Systems Power Sentinel 1133A Service disruption in device firmware (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-004089

DESCRIPTION

The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buffer, as demonstrated by a port scan. Arbiter Power Sentinel is a power industry test and measurement device. The firmware has a vulnerability in the Arbiter Power Sentinel 1133A device prior to 11Jun2012 Rev 421. Successful exploits will cause denial-of-service conditions in the affected device. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Power Sentinel Traffic Handling Denial of Service Vulnerability SECUNIA ADVISORY ID: SA50533 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50533/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50533 RELEASE DATE: 2012-09-06 DISCUSS ADVISORY: http://secunia.com/advisories/50533/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50533/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50533 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in Power Sentinel, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error when handling traffic sent to the ethernet port and can be exploited to cause the device to stop responding. SOLUTION: Update to firmware version 11June2012 Rev 421. Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: Power Sentinel: http://www.arbiter.com/news/index.php?id=261 ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.61

sources: NVD: CVE-2012-3012 // JVNDB: JVNDB-2012-004089 // CNVD: CNVD-2012-4933 // BID: 55416 // VULHUB: VHN-56293 // PACKETSTORM: 116292

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2012-4933

AFFECTED PRODUCTS

vendor:arbitermodel:power sentinelscope:eqversion:1133a

Trust: 1.8

vendor:arbitermodel:power sentinel 1133ascope:lteversion:11jun2012

Trust: 1.0

vendor:arbitermodel:power sentinel 1133ascope:ltversion:11jun2012 rev 421

Trust: 0.8

vendor:arbitermodel:power sentinel 1133ascope: - version: -

Trust: 0.6

vendor:arbitermodel:power sentinel 1133ascope:eqversion:11jun2012

Trust: 0.6

sources: CNVD: CNVD-2012-4933 // JVNDB: JVNDB-2012-004089 // CNNVD: CNNVD-201209-002 // NVD: CVE-2012-3012

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-3012
value: HIGH

Trust: 1.0

NVD: CVE-2012-3012
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201209-002
value: HIGH

Trust: 0.6

VULHUB: VHN-56293
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2012-3012
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-56293
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-56293 // JVNDB: JVNDB-2012-004089 // CNNVD: CNNVD-201209-002 // NVD: CVE-2012-3012

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-56293 // JVNDB: JVNDB-2012-004089 // NVD: CVE-2012-3012

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201209-002

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201209-002

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-004089

PATCH
title:Model 1133A Firmware Updateurl:http://www.arbiter.com/news/index.php?id=261
Trust: 0.8
title:Patch for Arbiter Systems Power Sentinel Denial of Service Vulnerability (CNVD-2012-4933)url:https://www.cnvd.org.cn/patchInfo/show/21551
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2012-4933 // 
            
            
            
            JVNDB: JVNDB-2012-004089

EXTERNAL IDS
db:NVDid:CVE-2012-3012
Trust: 3.4
db:ICS CERTid:ICSA-12-249-01
Trust: 2.6
db:JVNDBid:JVNDB-2012-004089
Trust: 0.8
db:SECUNIAid:50533
Trust: 0.8
db:CNNVDid:CNNVD-201209-002
Trust: 0.7
db:CNVDid:CNVD-2012-4933
Trust: 0.6
db:BIDid:55416
Trust: 0.4
db:VULHUBid:VHN-56293
Trust: 0.1
db:PACKETSTORMid:116292
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-4933 // 
            
            
            
            VULHUB: VHN-56293 // 
            
            
            
            BID: 55416 // 
            
            
            
            JVNDB: JVNDB-2012-004089 // 
            
            
            
            PACKETSTORM: 116292 // 
            
            
            
            CNNVD: CNNVD-201209-002 // 
            
            
            
            NVD: CVE-2012-3012

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-12-249-01.pdf
Trust: 2.6
url:http://www.arbiter.com/news/index.php?id=261
Trust: 1.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3012
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3012
Trust: 0.8
url:http://www.arbiter.com/news/index.php?id=261http
Trust: 0.6
url:http://secunia.com/advisories/50533
Trust: 0.6
url:http://secunia.com/advisories/50533/#comments
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=50533
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/50533/
Trust: 0.1
url:http://secunia.com/blog/325/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-4933 // 
            
            
            
            VULHUB: VHN-56293 // 
            
            
            
            JVNDB: JVNDB-2012-004089 // 
            
            
            
            PACKETSTORM: 116292 // 
            
            
            
            CNNVD: CNNVD-201209-002 // 
            
            
            
            NVD: CVE-2012-3012

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 55416

SOURCES
db:CNVDid:CNVD-2012-4933
db:VULHUBid:VHN-56293
db:BIDid:55416
db:JVNDBid:JVNDB-2012-004089
db:PACKETSTORMid:116292
db:CNNVDid:CNNVD-201209-002
db:NVDid:CVE-2012-3012

LAST UPDATE DATE
2025-04-11T23:03:02.132000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2012-4933date:2012-09-07T00:00:00
db:VULHUBid:VHN-56293date:2012-09-13T00:00:00
db:BIDid:55416date:2012-09-05T00:00:00
db:JVNDBid:JVNDB-2012-004089date:2012-09-07T00:00:00
db:CNNVDid:CNNVD-201209-002date:2012-09-11T00:00:00
db:NVDid:CVE-2012-3012date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:CNVDid:CNVD-2012-4933date:2012-09-07T00:00:00
db:VULHUBid:VHN-56293date:2012-09-05T00:00:00
db:BIDid:55416date:2012-09-05T00:00:00
db:JVNDBid:JVNDB-2012-004089date:2012-09-07T00:00:00
db:PACKETSTORMid:116292date:2012-09-06T06:38:27
db:CNNVDid:CNNVD-201209-002date:2012-09-11T00:00:00
db:NVDid:CVE-2012-3012date:2012-09-05T20:55:01.333