CVE-2012-4356 Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP pa...
MediumCVSS 4.3
EPSS 27.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sielcosistemi winlog pro | <= 2.07.16 | No fix listed |
| sielcosistemi winlog pro | = 2.06.00 | No fix listed |
| sielcosistemi winlog pro | = 2.06.03 | No fix listed |
| sielcosistemi winlog pro | = 2.06.04 | No fix listed |
| sielcosistemi winlog pro | = 2.06.06 | No fix listed |
| sielcosistemi winlog pro | = 2.06.09 | No fix listed |
| sielcosistemi winlog pro | = 2.06.10 | No fix listed |
| sielcosistemi winlog pro | = 2.06.12 | No fix listed |
| sielcosistemi winlog pro | = 2.06.13 | No fix listed |
| sielcosistemi winlog pro | = 2.06.14 | No fix listed |
| sielcosistemi winlog pro | = 2.06.18 | No fix listed |
| sielcosistemi winlog pro | = 2.06.21 | No fix listed |
| sielcosistemi winlog pro | = 2.06.24 | No fix listed |
| sielcosistemi winlog pro | = 2.06.25 | No fix listed |
| sielcosistemi winlog pro | = 2.06.28 | No fix listed |
| sielcosistemi winlog pro | = 2.06.40 | No fix listed |
| sielcosistemi winlog pro | = 2.06.46 | No fix listed |
| sielcosistemi winlog pro | = 2.06.50 | No fix listed |
| sielcosistemi winlog pro | = 2.06.60 | No fix listed |
| sielcosistemi winlog pro | = 2.06.73 | No fix listed |
| sielcosistemi winlog pro | = 2.06.86 | No fix listed |
| sielcosistemi winlog pro | = 2.07.00 | No fix listed |
| sielcosistemi winlog pro | = 2.07.01 | No fix listed |
| sielcosistemi winlog pro | = 2.07.08 | No fix listed |
| sielcosistemi winlog pro | = 2.07.09 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sielcosistemi winlog pro | = 2.07.11 | No fix listed |
| sielcosistemi winlog pro | = 2.07.14 | No fix listed |
| sielcosistemi winlog lite | <= 2.07.16 | No fix listed |
| sielcosistemi winlog lite | = 2.06.00 | No fix listed |
| sielcosistemi winlog lite | = 2.06.03 | No fix listed |
| sielcosistemi winlog lite | = 2.06.04 | No fix listed |
| sielcosistemi winlog lite | = 2.06.06 | No fix listed |
| sielcosistemi winlog lite | = 2.06.09 | No fix listed |
| sielcosistemi winlog lite | = 2.06.10 | No fix listed |
| sielcosistemi winlog lite | = 2.06.12 | No fix listed |
| sielcosistemi winlog lite | = 2.06.13 | No fix listed |
| sielcosistemi winlog lite | = 2.06.14 | No fix listed |
| sielcosistemi winlog lite | = 2.06.18 | No fix listed |
| sielcosistemi winlog lite | = 2.06.21 | No fix listed |
| sielcosistemi winlog lite | = 2.06.24 | No fix listed |
| sielcosistemi winlog lite | = 2.06.25 | No fix listed |
| sielcosistemi winlog lite | = 2.06.28 | No fix listed |
| sielcosistemi winlog lite | = 2.06.40 | No fix listed |
| sielcosistemi winlog lite | = 2.06.46 | No fix listed |
| sielcosistemi winlog lite | = 2.06.50 | No fix listed |
| sielcosistemi winlog lite | = 2.06.60 | No fix listed |
| sielcosistemi winlog lite | = 2.06.73 | No fix listed |
| sielcosistemi winlog lite | = 2.06.86 | No fix listed |
| sielcosistemi winlog lite | = 2.07.00 | No fix listed |
| sielcosistemi winlog lite | = 2.07.01 | No fix listed |
| sielcosistemi winlog lite | = 2.07.08 | No fix listed |
| sielcosistemi winlog lite | = 2.07.09 | No fix listed |
| sielcosistemi winlog lite | = 2.07.11 | No fix listed |
| sielcosistemi winlog lite | = 2.07.14 | No fix listed |
References
- aluigi.org exploit
- 49395 third-party-advisory vendor-advisory
- www.sielcosistemi.com
- www.us-cert.gov us-government-resource