Sielco Sistemi Winlog Buffer Overflow - Ver2 (CVE-2012-3815)

A stack-based buffer overflow vulnerability has been reported in Sielco Sistemi Winlog. The vulnerability is due to insufficient sanitation of TCP requests. A remote attacker can exploit this issue by sending a specially crafted TCP request to the affected server. Successful exploitation would...

Sielco Sistemi Winlog < 2.07.18 Multiple Vulnerabilities

Binary data scadawinlog20718.nbin...

CVE-2012-3815

CVE-2012-3815 is complemented by Red Hat CVE-2012-4353, documenting a stack-based buffer overflow in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17. The flaw allows remote code execution via a crafted port-46824 TCP packet that triggers an incorrect file-open ...

CVE-2012-3815

creationtimestamp| type| source ---|---|--- 2012-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19025 2012-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19409 2018-05-29 15:50:33+00:00| seen|...

Sielco Sistemi Winlog Multiple Vulnerabilities

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-12-213-01 - Sielco Sistemi Winlog Multiple Vulnerabilities that was published July 31, 2012, on the NCCIC/ICS-CERT web site. The updated advisory matches new CVE identifiers up with other publicly available...