CVE-2012-4357

Exploit

EPSS 23.45%
Veröffentlicht 19.08.2012 20:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sielcosistemi ≫ Winlog Pro Version <= 2.07.16

Sielcosistemi ≫ Winlog Pro Version2.06.00

Sielcosistemi ≫ Winlog Pro Version2.06.03

Sielcosistemi ≫ Winlog Pro Version2.06.04

Sielcosistemi ≫ Winlog Pro Version2.06.06

Sielcosistemi ≫ Winlog Pro Version2.06.09

Sielcosistemi ≫ Winlog Pro Version2.06.10

Sielcosistemi ≫ Winlog Pro Version2.06.12

Sielcosistemi ≫ Winlog Pro Version2.06.13

Sielcosistemi ≫ Winlog Pro Version2.06.14

Sielcosistemi ≫ Winlog Pro Version2.06.18

Sielcosistemi ≫ Winlog Pro Version2.06.21

Sielcosistemi ≫ Winlog Pro Version2.06.24

Sielcosistemi ≫ Winlog Pro Version2.06.25

Sielcosistemi ≫ Winlog Pro Version2.06.28

Sielcosistemi ≫ Winlog Pro Version2.06.40

Sielcosistemi ≫ Winlog Pro Version2.06.46

Sielcosistemi ≫ Winlog Pro Version2.06.50

Sielcosistemi ≫ Winlog Pro Version2.06.60

Sielcosistemi ≫ Winlog Pro Version2.06.73

Sielcosistemi ≫ Winlog Pro Version2.06.86

Sielcosistemi ≫ Winlog Pro Version2.07.00

Sielcosistemi ≫ Winlog Pro Version2.07.01

Sielcosistemi ≫ Winlog Pro Version2.07.08

Sielcosistemi ≫ Winlog Pro Version2.07.09

Sielcosistemi ≫ Winlog Pro Version2.07.11

Sielcosistemi ≫ Winlog Pro Version2.07.14

Sielcosistemi ≫ Winlog Lite Version <= 2.07.16

Sielcosistemi ≫ Winlog Lite Version2.06.00

Sielcosistemi ≫ Winlog Lite Version2.06.03

Sielcosistemi ≫ Winlog Lite Version2.06.04

Sielcosistemi ≫ Winlog Lite Version2.06.06

Sielcosistemi ≫ Winlog Lite Version2.06.09

Sielcosistemi ≫ Winlog Lite Version2.06.10

Sielcosistemi ≫ Winlog Lite Version2.06.12

Sielcosistemi ≫ Winlog Lite Version2.06.13

Sielcosistemi ≫ Winlog Lite Version2.06.14

Sielcosistemi ≫ Winlog Lite Version2.06.18

Sielcosistemi ≫ Winlog Lite Version2.06.21

Sielcosistemi ≫ Winlog Lite Version2.06.24

Sielcosistemi ≫ Winlog Lite Version2.06.25

Sielcosistemi ≫ Winlog Lite Version2.06.28

Sielcosistemi ≫ Winlog Lite Version2.06.40

Sielcosistemi ≫ Winlog Lite Version2.06.46

Sielcosistemi ≫ Winlog Lite Version2.06.50

Sielcosistemi ≫ Winlog Lite Version2.06.60

Sielcosistemi ≫ Winlog Lite Version2.06.73

Sielcosistemi ≫ Winlog Lite Version2.06.86

Sielcosistemi ≫ Winlog Lite Version2.07.00

Sielcosistemi ≫ Winlog Lite Version2.07.01

Sielcosistemi ≫ Winlog Lite Version2.07.08

Sielcosistemi ≫ Winlog Lite Version2.07.09

Sielcosistemi ≫ Winlog Lite Version2.07.11

Sielcosistemi ≫ Winlog Lite Version2.07.14

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	23.45%	0.954

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/49395

Vendor Advisory

http://www.sielcosistemi.com/en/news/index.html?id=69

http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf

US Government Resource

http://aluigi.org/adv/winlog_2-adv.txt

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2012-4357

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4357

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4357

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-4357