critical9.3Public exploit code
CVE-2012-4357
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities2012-06-27 · dos · windows · Verified
Impact
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sielcosistemi | Winlog Pro | through 2.07.16 Versions 2.06.00, 2.06.03, 2.06.04, 2.06.06, 2.06.09 |
| Sielcosistemi | Winlog Lite | through 2.07.16 Versions 2.06.00, 2.06.03, 2.06.04, 2.06.06, 2.06.09 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf