CVE-2012-4358

Exploit

EPSS 1.68%
Veröffentlicht 19.08.2012 20:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sielcosistemi ≫ Winlog Pro Version <= 2.07.16

Sielcosistemi ≫ Winlog Pro Version2.06.00

Sielcosistemi ≫ Winlog Pro Version2.06.03

Sielcosistemi ≫ Winlog Pro Version2.06.04

Sielcosistemi ≫ Winlog Pro Version2.06.06

Sielcosistemi ≫ Winlog Pro Version2.06.09

Sielcosistemi ≫ Winlog Pro Version2.06.10

Sielcosistemi ≫ Winlog Pro Version2.06.12

Sielcosistemi ≫ Winlog Pro Version2.06.13

Sielcosistemi ≫ Winlog Pro Version2.06.14

Sielcosistemi ≫ Winlog Pro Version2.06.18

Sielcosistemi ≫ Winlog Pro Version2.06.21

Sielcosistemi ≫ Winlog Pro Version2.06.24

Sielcosistemi ≫ Winlog Pro Version2.06.25

Sielcosistemi ≫ Winlog Pro Version2.06.28

Sielcosistemi ≫ Winlog Pro Version2.06.40

Sielcosistemi ≫ Winlog Pro Version2.06.46

Sielcosistemi ≫ Winlog Pro Version2.06.50

Sielcosistemi ≫ Winlog Pro Version2.06.60

Sielcosistemi ≫ Winlog Pro Version2.06.73

Sielcosistemi ≫ Winlog Pro Version2.06.86

Sielcosistemi ≫ Winlog Pro Version2.07.00

Sielcosistemi ≫ Winlog Pro Version2.07.01

Sielcosistemi ≫ Winlog Pro Version2.07.08

Sielcosistemi ≫ Winlog Pro Version2.07.09

Sielcosistemi ≫ Winlog Pro Version2.07.11

Sielcosistemi ≫ Winlog Pro Version2.07.14

Sielcosistemi ≫ Winlog Lite Version <= 2.07.16

Sielcosistemi ≫ Winlog Lite Version2.06.00

Sielcosistemi ≫ Winlog Lite Version2.06.03

Sielcosistemi ≫ Winlog Lite Version2.06.04

Sielcosistemi ≫ Winlog Lite Version2.06.06

Sielcosistemi ≫ Winlog Lite Version2.06.09

Sielcosistemi ≫ Winlog Lite Version2.06.10

Sielcosistemi ≫ Winlog Lite Version2.06.12

Sielcosistemi ≫ Winlog Lite Version2.06.13

Sielcosistemi ≫ Winlog Lite Version2.06.14

Sielcosistemi ≫ Winlog Lite Version2.06.18

Sielcosistemi ≫ Winlog Lite Version2.06.21

Sielcosistemi ≫ Winlog Lite Version2.06.24

Sielcosistemi ≫ Winlog Lite Version2.06.25

Sielcosistemi ≫ Winlog Lite Version2.06.28

Sielcosistemi ≫ Winlog Lite Version2.06.40

Sielcosistemi ≫ Winlog Lite Version2.06.46

Sielcosistemi ≫ Winlog Lite Version2.06.50

Sielcosistemi ≫ Winlog Lite Version2.06.60

Sielcosistemi ≫ Winlog Lite Version2.06.73

Sielcosistemi ≫ Winlog Lite Version2.06.86

Sielcosistemi ≫ Winlog Lite Version2.07.00

Sielcosistemi ≫ Winlog Lite Version2.07.01

Sielcosistemi ≫ Winlog Lite Version2.07.08

Sielcosistemi ≫ Winlog Lite Version2.07.09

Sielcosistemi ≫ Winlog Lite Version2.07.11

Sielcosistemi ≫ Winlog Lite Version2.07.14

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.68%	0.816

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/49395

Vendor Advisory

http://www.sielcosistemi.com/en/news/index.html?id=69

http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf

US Government Resource

http://aluigi.org/adv/winlog_2-adv.txt

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2012-4358

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4358

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4358

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-4358