CVE-2012-4357 Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP....
HighCVSS 9.3
EPSS 7.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sielcosistemi winlog pro | <= 2.07.16 | No fix listed |
| sielcosistemi winlog pro | = 2.06.00 | No fix listed |
| sielcosistemi winlog pro | = 2.06.03 | No fix listed |
| sielcosistemi winlog pro | = 2.06.04 | No fix listed |
| sielcosistemi winlog pro | = 2.06.06 | No fix listed |
| sielcosistemi winlog pro | = 2.06.09 | No fix listed |
| sielcosistemi winlog pro | = 2.06.10 | No fix listed |
| sielcosistemi winlog pro | = 2.06.12 | No fix listed |
| sielcosistemi winlog pro | = 2.06.13 | No fix listed |
| sielcosistemi winlog pro | = 2.06.14 | No fix listed |
| sielcosistemi winlog pro | = 2.06.18 | No fix listed |
| sielcosistemi winlog pro | = 2.06.21 | No fix listed |
| sielcosistemi winlog pro | = 2.06.24 | No fix listed |
| sielcosistemi winlog pro | = 2.06.25 | No fix listed |
| sielcosistemi winlog pro | = 2.06.28 | No fix listed |
| sielcosistemi winlog pro | = 2.06.40 | No fix listed |
| sielcosistemi winlog pro | = 2.06.46 | No fix listed |
| sielcosistemi winlog pro | = 2.06.50 | No fix listed |
| sielcosistemi winlog pro | = 2.06.60 | No fix listed |
| sielcosistemi winlog pro | = 2.06.73 | No fix listed |
| sielcosistemi winlog pro | = 2.06.86 | No fix listed |
| sielcosistemi winlog pro | = 2.07.00 | No fix listed |
| sielcosistemi winlog pro | = 2.07.01 | No fix listed |
| sielcosistemi winlog pro | = 2.07.08 | No fix listed |
| sielcosistemi winlog pro | = 2.07.09 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sielcosistemi winlog pro | = 2.07.11 | No fix listed |
| sielcosistemi winlog pro | = 2.07.14 | No fix listed |
| sielcosistemi winlog lite | <= 2.07.16 | No fix listed |
| sielcosistemi winlog lite | = 2.06.00 | No fix listed |
| sielcosistemi winlog lite | = 2.06.03 | No fix listed |
| sielcosistemi winlog lite | = 2.06.04 | No fix listed |
| sielcosistemi winlog lite | = 2.06.06 | No fix listed |
| sielcosistemi winlog lite | = 2.06.09 | No fix listed |
| sielcosistemi winlog lite | = 2.06.10 | No fix listed |
| sielcosistemi winlog lite | = 2.06.12 | No fix listed |
| sielcosistemi winlog lite | = 2.06.13 | No fix listed |
| sielcosistemi winlog lite | = 2.06.14 | No fix listed |
| sielcosistemi winlog lite | = 2.06.18 | No fix listed |
| sielcosistemi winlog lite | = 2.06.21 | No fix listed |
| sielcosistemi winlog lite | = 2.06.24 | No fix listed |
| sielcosistemi winlog lite | = 2.06.25 | No fix listed |
| sielcosistemi winlog lite | = 2.06.28 | No fix listed |
| sielcosistemi winlog lite | = 2.06.40 | No fix listed |
| sielcosistemi winlog lite | = 2.06.46 | No fix listed |
| sielcosistemi winlog lite | = 2.06.50 | No fix listed |
| sielcosistemi winlog lite | = 2.06.60 | No fix listed |
| sielcosistemi winlog lite | = 2.06.73 | No fix listed |
| sielcosistemi winlog lite | = 2.06.86 | No fix listed |
| sielcosistemi winlog lite | = 2.07.00 | No fix listed |
| sielcosistemi winlog lite | = 2.07.01 | No fix listed |
| sielcosistemi winlog lite | = 2.07.08 | No fix listed |
| sielcosistemi winlog lite | = 2.07.09 | No fix listed |
| sielcosistemi winlog lite | = 2.07.11 | No fix listed |
| sielcosistemi winlog lite | = 2.07.14 | No fix listed |
References
- aluigi.org exploit
- 49395 third-party-advisory vendor-advisory
- www.sielcosistemi.com
- www.us-cert.gov us-government-resource