CVE-2012-4353

CRITICO 9.3CVE-2012-4353 · Published 19/08/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
winlog lite sielcosistemi	`= 2.06.00= 2.06.03= 2.06.04= 2.06.06= 2.06.09= 2.06.10= 2.06.12= 2.06.13= 2.06.14= 2.06.18= 2.06.21= 2.06.24= 2.06.25= 2.06.28= 2.06.40= 2.06.46= 2.06.50= 2.06.60= 2.06.73= 2.06.86= 2.07.00= 2.07.01= 2.07.08= 2.07.09= 2.07.11= 2.07.14≤ 2.07.16`	No fix yet
winlog pro sielcosistemi	`= 2.06.00= 2.06.03= 2.06.04= 2.06.06= 2.06.09= 2.06.10= 2.06.12= 2.06.13= 2.06.14= 2.06.18= 2.06.21= 2.06.24= 2.06.25= 2.06.28= 2.06.40= 2.06.46= 2.06.50= 2.06.60= 2.06.73= 2.06.86= 2.07.00= 2.07.01= 2.07.08= 2.07.09= 2.07.11= 2.07.14≤ 2.07.16`	No fix yet

Description

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815. NOTE: some of these details are obtained from third party information.

References

aluigi.org/adv/winlog_2-adv.txt · Exploit
secunia.com/advisories/49395 · Vendor Advisory
sielcosistemi.com/en/news/index.html · Patch
us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf · US Government Resource

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free