CVE-2012-4356

CVE-2012-4356 describes multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA (pre-2.07.17) and Winlog Lite SCADA (pre-2.07.17) . The flaw allows a remote attacker to read arbitrary files by sending crafted TCP packets to port 46824, issuing a file-open operation (opcode...

Sielco Sistemi Winlog Remote File Access

This module exploits a directory traversal in Sielco Sistemi Winlog. The vulnerability exists in the Runtime.exe service and can be triggered by sending a specially crafted packet to the 46824/TCP port. This module has been successfully tested on Sielco Sistemi Winlog Lite 2.07.14. This module...