CVE-2012-4355: Undefined Security Weakness

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

CVE-2012-4359: Improper Input Validation

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service invalid 0x00 write operation and daemon crash or possibly have unspecified other impact via a...

CVE-2012-4353: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the TCPIPSBinOpenFileFP function,...

PT-2012-5354

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to execute arbitrary code by referencing an invalid file-pointer index within a...

PT-2012-5352

Name of the Vulnerable Software and Affected Versions Winlog Pro SCADA versions prior to 2.07.18 Winlog Lite SCADA versions prior to 2.07.18 Description The issue allows remote attackers to execute arbitrary code via a crafted TCP packet sent to port 46824, containing a negative integer after the...

PT-2012-5355

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to cause a denial of service, potentially resulting in an invalid 0x00 write...

PT-2012-5356

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.18 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.18 Description The issue is related to the lack of validation of the return value of the realloc function, which can be exploited...

PT-2012-5353

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to read arbitrary files via port 46824 TCP packets. This is achieved by specifyi...

PT-2012-5350

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted TCP...

CVE-2012-3815

CVE-2012-3815 is complemented by Red Hat CVE-2012-4353, documenting a stack-based buffer overflow in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17. The flaw allows remote code execution via a crafted port-46824 TCP packet that triggers an incorrect file-open ...

PT-2012-5017

Name of the Vulnerable Software and Affected Versions Winlog Pro SCADA versions prior to 2.07.18 Winlog Lite SCADA versions prior to 2.07.18 Description A buffer overflow issue exists in RunTime.exe, allowing remote attackers to execute arbitrary code via a crafted packet to TCP port 46824...

CVE-2012-3815: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information...

Sielco Sistemi Winlog Buffer Overflow <= v2.07.14

!/usr/bin/ruby --------------------------------------------- Sielco Sistemi Winlog Buffer Overflow = v2.07.14 - Buffer overflow vulnerability Date: 04.06.2012 --------------------------------------------- - Description Winlog Lite is the entry level version of the SCADA/HMI software Winlog Pro...

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow

!/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link: http://www.sielcosistemi.com/en/download/public/winloglite.html Version: 2.07.14...

Sielco Sistemi Winlog PRO Buffer overflow Vulnerability

Sielco Sistemi Winlog PRO is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4037

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file...

Buffer overflow

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file...

CVE-2011-4037

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file...

CVE-2011-4037

CVE-2011-4037 affects Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09. The root cause is a buffer overflow caused by invalid data in certain fields of a project file (unspecified fields), as described across multiple sources. The vulnerability could allow code execution, w...

PT-2011-4824

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog PRO versions prior to 2.07.09 Sielco Sistemi Winlog Lite versions prior to 2.07.09 Description A buffer overflow issue allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields...