CVE-2012-4353
high · 9.3Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815. NOTE: some of these details are obtained from third party information.
9.3
CVSS
24.7%
EPSS (exploit prob.)
98th
EPSS percentile
2012-08-19
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sielcosistemi | winlog_pro | <= 2.07.16 |
| sielcosistemi | winlog_pro | 2.06.00 |
| sielcosistemi | winlog_pro | 2.06.03 |
| sielcosistemi | winlog_pro | 2.06.04 |
| sielcosistemi | winlog_pro | 2.06.06 |
| sielcosistemi | winlog_pro | 2.06.09 |
| sielcosistemi | winlog_pro | 2.06.10 |
| sielcosistemi | winlog_pro | 2.06.12 |
| sielcosistemi | winlog_pro | 2.06.13 |
| sielcosistemi | winlog_pro | 2.06.14 |
| sielcosistemi | winlog_pro | 2.06.18 |
| sielcosistemi | winlog_pro | 2.06.21 |
| sielcosistemi | winlog_pro | 2.06.24 |
| sielcosistemi | winlog_pro | 2.06.25 |
| sielcosistemi | winlog_pro | 2.06.28 |
| sielcosistemi | winlog_pro | 2.06.40 |
| sielcosistemi | winlog_pro | 2.06.46 |
| sielcosistemi | winlog_pro | 2.06.50 |
| sielcosistemi | winlog_pro | 2.06.60 |
| sielcosistemi | winlog_pro | 2.06.73 |
| sielcosistemi | winlog_pro | 2.06.86 |
| sielcosistemi | winlog_pro | 2.07.00 |
| sielcosistemi | winlog_pro | 2.07.01 |
| sielcosistemi | winlog_pro | 2.07.08 |
| sielcosistemi | winlog_pro | 2.07.09 |
| sielcosistemi | winlog_pro | 2.07.11 |
| sielcosistemi | winlog_pro | 2.07.14 |
| sielcosistemi | winlog_lite | <= 2.07.16 |
| sielcosistemi | winlog_lite | 2.06.00 |
| sielcosistemi | winlog_lite | 2.06.03 |
| sielcosistemi | winlog_lite | 2.06.04 |
| sielcosistemi | winlog_lite | 2.06.06 |
| sielcosistemi | winlog_lite | 2.06.09 |
| sielcosistemi | winlog_lite | 2.06.10 |
| sielcosistemi | winlog_lite | 2.06.12 |
| sielcosistemi | winlog_lite | 2.06.13 |
| sielcosistemi | winlog_lite | 2.06.14 |
| sielcosistemi | winlog_lite | 2.06.18 |
| sielcosistemi | winlog_lite | 2.06.21 |
| sielcosistemi | winlog_lite | 2.06.24 |
Check a specific version with /api/v1/cve/match.
References
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-4353