CVE-2012-2122 — exploited in the wild
Exploitation observed by OffSeq honeypot sensors · last 30 days · last seen 19 days ago · first observed 2026-10-04 (19 days ago)
First captured 19 days ago; the most recent exploitation attempt against OffSeq honeypots was 19 days ago.
About CVE-2012-2122
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.
CWE-287
OffSeq's global honeypot fleet recorded 83 exploitation attempts against CVE-2012-2122 from 9 distinct source IPs in the last 30 days — direct in-the-wild telemetry: every hit is a real attacker probing a decoy, not a scan of a vulnerability database.