CVE-2012-3815
high · 9.3Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information.
9.3
CVSS
44.2%
EPSS (exploit prob.)
99th
EPSS percentile
2012-06-27
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sielcosistemi | winlog_lite | <= 2.07.14 |
| sielcosistemi | winlog_lite | 2.06.00 |
| sielcosistemi | winlog_lite | 2.06.03 |
| sielcosistemi | winlog_lite | 2.06.04 |
| sielcosistemi | winlog_lite | 2.06.06 |
| sielcosistemi | winlog_lite | 2.06.09 |
| sielcosistemi | winlog_lite | 2.06.10 |
| sielcosistemi | winlog_lite | 2.06.12 |
| sielcosistemi | winlog_lite | 2.06.13 |
| sielcosistemi | winlog_lite | 2.06.14 |
| sielcosistemi | winlog_lite | 2.06.18 |
| sielcosistemi | winlog_lite | 2.06.21 |
| sielcosistemi | winlog_lite | 2.06.24 |
| sielcosistemi | winlog_lite | 2.06.25 |
| sielcosistemi | winlog_lite | 2.06.28 |
| sielcosistemi | winlog_lite | 2.06.40 |
| sielcosistemi | winlog_lite | 2.06.46 |
| sielcosistemi | winlog_lite | 2.06.50 |
| sielcosistemi | winlog_lite | 2.06.60 |
| sielcosistemi | winlog_lite | 2.06.73 |
| sielcosistemi | winlog_lite | 2.06.86 |
| sielcosistemi | winlog_lite | 2.07.00 |
| sielcosistemi | winlog_lite | 2.07.01 |
| sielcosistemi | winlog_lite | 2.07.08 |
| sielcosistemi | winlog_lite | 2.07.09 |
| sielcosistemi | winlog_lite | 2.07.11 |
| sielcosistemi | winlog_pro | <= 2.07.14 |
| sielcosistemi | winlog_pro | 2.06.00 |
| sielcosistemi | winlog_pro | 2.06.03 |
| sielcosistemi | winlog_pro | 2.06.04 |
| sielcosistemi | winlog_pro | 2.06.06 |
| sielcosistemi | winlog_pro | 2.06.09 |
| sielcosistemi | winlog_pro | 2.06.10 |
| sielcosistemi | winlog_pro | 2.06.12 |
| sielcosistemi | winlog_pro | 2.06.13 |
| sielcosistemi | winlog_pro | 2.06.14 |
| sielcosistemi | winlog_pro | 2.06.18 |
| sielcosistemi | winlog_pro | 2.06.21 |
| sielcosistemi | winlog_pro | 2.06.24 |
| sielcosistemi | winlog_pro | 2.06.25 |
Check a specific version with /api/v1/cve/match.
References
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0009.html
- http://secunia.com/advisories/49395
- http://securitytracker.com/id?1027128
- http://www.osvdb.org/82654
- http://www.s3cur1ty.de/m1adv2012-001
- http://www.securityfocus.com/bid/53811
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.sielcosistemi.com/en/news/index.html?id=70
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76060
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0009.html
- http://secunia.com/advisories/49395
- http://securitytracker.com/id?1027128
- http://www.osvdb.org/82654
- http://www.s3cur1ty.de/m1adv2012-001
- http://www.securityfocus.com/bid/53811
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.sielcosistemi.com/en/news/index.html?id=70
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76060
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-3815