Sielcosistemi

Winlog Lite

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2017-5161

  • EPSS 0.12%
  • Veröffentlicht 13.02.2017 21:59:02
  • Zuletzt bearbeitet 20.04.2025 01:37:25

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been iden...

9.3

CVE-2012-4359

Exploit
  • EPSS 1.68%
  • Veröffentlicht 19.08.2012 20:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) o...

9.3

CVE-2012-4353

Exploit
  • EPSS 14.78%
  • Veröffentlicht 19.08.2012 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-op...

9.3

CVE-2012-4354

Exploit
  • EPSS 30.76%
  • Veröffentlicht 19.08.2012 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorre...

9.3

CVE-2012-4355

Exploit
  • EPSS 30.76%
  • Veröffentlicht 19.08.2012 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorre...

4.3

CVE-2012-4356

Exploit
  • EPSS 66.3%
  • Veröffentlicht 19.08.2012 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode...

9.3

CVE-2012-4357

Exploit
  • EPSS 23.45%
  • Veröffentlicht 19.08.2012 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads t...

9.3

CVE-2012-4358

Exploit
  • EPSS 1.68%
  • Veröffentlicht 19.08.2012 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) o...

9.3

CVE-2012-3815

Exploit
  • EPSS 80.82%
  • Veröffentlicht 27.06.2012 21:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained ...

9.3

CVE-2011-4037

  • EPSS 6.6%
  • Veröffentlicht 22.12.2011 15:29:19
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file.