CVE-2012-4357

CVE-2012-4357 describes an array index error in Sielco Sistemi Winlog Pro SCADA (before 2.07.17) and Winlog Lite SCADA (before 2.07.17) that enables remote code execution. An attacker can reference an invalid file-pointer index within a port-46824 TCP packet, triggering execution of an EnterCriti...

CVE-2012-4359

Summary (CVE-2012-4359): Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 fail to validate the return value of realloc, enabling a remote attacker to cause a denial of service (invalid 0x00 write) and daemon crash. This may occur via a port-46824 TCP packet cont...

CVE-2012-4359

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service invalid 0x00 write operation and daemon crash or possibly have unspecified other impact via a...

CVE-2012-4355

Summary (CVE-2012-4355) : TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA <2.07.18 and Winlog Lite SCADA

CVE-2012-4354

CVE-2012-4354 affects TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA (before 2.07.17) and Winlog Lite SCADA (before 2.07.17). The vulnerability arises from a port-46824 TCP packet containing a crafted positive integer after the opcode, which triggers incorrect function-pointer processing and...

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

CVE-2012-4358

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 (and related 2.07.18 variants) are affected by a vulnerability where the realloc return value is not validated. This can allow remote attackers to cause a denial of service (invalid 0x00 write operation and daemon...

CVE-2012-4354

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

PT-2012-5356

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.18 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.18 Description The issue is related to the lack of validation of the return value of the realloc function, which can be exploited...

PT-2012-5352

Name of the Vulnerable Software and Affected Versions Winlog Pro SCADA versions prior to 2.07.18 Winlog Lite SCADA versions prior to 2.07.18 Description The issue allows remote attackers to execute arbitrary code via a crafted TCP packet sent to port 46824, containing a negative integer after the...

PT-2012-5355

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to cause a denial of service, potentially resulting in an invalid 0x00 write...

CVE-2012-4356: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. dot dot in a pathname, followed ...

CVE-2012-4353: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the TCPIPSBinOpenFileFP function,...

CVE-2012-4357: Improper Input Validation

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

CVE-2012-4359: Improper Input Validation

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service invalid 0x00 write operation and daemon crash or possibly have unspecified other impact via a...

PT-2012-5354

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to execute arbitrary code by referencing an invalid file-pointer index within a...

PT-2012-5351

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to execute arbitrary code via a crafted TCP packet on port 46824. This is achiev...

CVE-2012-4355: Undefined Security Weakness

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

CVE-2012-4358: Improper Input Validation

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service invalid 0x00 write operation and daemon crash or possibly have unspecified other impact via a...

CVE-2012-4354: Undefined Security Weakness

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to ...