CVE-2012-4661: Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 550...

Security readout for executives and security teams

This is a Cisco firewall software flaw in the DCERPC inspection engine. A specially crafted network packet could potentially let a remote attacker run code on affected ASA, ASASM, or FWSM devices. Because these devices often sit at network boundaries, exposure should be treated as serious even though the bundle does not confirm active exploitation. Likely exposure is limited to legacy Cisco ASA 5500, ASASM on Catalyst 6500, and FWSM on Catalyst 6500 or 7600 systems running the vulnerable software versions with DCERPC inspection reachable by traffic. Prioritize remediation if legacy Cisco firewalls remain in production. The business concern is control of a security boundary device, not only compromise of an endpoint. If these platforms are retired or already upgraded, residual risk is lower. Mitigation focus: Inventory Cisco ASA, ASASM, and FWSM devices and record exact software versions.; Upgrade ASA/ASASM 8.3 to 8.3(2.34) or later.; Upgrade ASA/ASASM 8.4 to 8.4(4.4) or later..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.