| Package | Affected versions | Patched versions |
|---|---|---|
| winlog lite | = 2.06.00= 2.06.03= 2.06.04= 2.06.06= 2.06.09= 2.06.10= 2.06.12= 2.06.13= 2.06.14= 2.06.18= 2.06.21= 2.06.24= 2.06.25= 2.06.28= 2.06.40= 2.06.46= 2.06.50= 2.06.60= 2.06.73= 2.06.86= 2.07.00= 2.07.01= 2.07.08= 2.07.09= 2.07.11= 2.07.14≤ 2.07.16 | |
| winlog pro | = 2.06.00= 2.06.03= 2.06.04= 2.06.06= 2.06.09= 2.06.10= 2.06.12= 2.06.13= 2.06.14= 2.06.18= 2.06.21= 2.06.24= 2.06.25= 2.06.28= 2.06.40= 2.06.46= 2.06.50= 2.06.60= 2.06.73= 2.06.86= 2.07.00= 2.07.01= 2.07.08= 2.07.09= 2.07.11= 2.07.14≤ 2.07.16 |
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free