EUVD-2012-4302

Malware in sbrugna...

CVE-2012-4354

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

PT-2017-16355

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Lite SCADA Software versions prior to 3.02.01 Sielco Sistemi Winlog Pro SCADA Software versions prior to 3.02.01 Description An uncontrolled search path element, also known as DLL Hijacking, has been identified in the...

CVE-2017-5161: Uncontrolled Search Path Element

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element DLL Hijacking vulnerability has been identified. Exploitation of this vulnerability could...

CVE-2012-4356

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. dot dot in a pathname, followed ...

CVE-2012-4353

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the TCPIPSBinOpenFileFP function,...

Stack overflow

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the TCPIPSBinOpenFileFP function,...

Buffer overflow

TCPIPSStory.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to ...

Integer overflow

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service invalid 0x00 write operation and daemon crash or possibly have unspecified other impact via a...

Directory traversal

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. dot dot in a pathname, followed ...

CVE-2012-4353

CVE-2012-4353 is a stack-based buffer overflow in RunTime.exe of Sielco Sistemi Winlog Pro SCADA (before 2.07.17) and Winlog Lite SCADA (before 2.07.17). A remote attacker can trigger arbitrary code execution by sending a crafted TCP packet to port 46824, causing an incorrect file-open by the _TC...

CVE-2012-4355

Summary (CVE-2012-4355) : TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA <2.07.18 and Winlog Lite SCADA

CVE-2012-4356

CVE-2012-4356 describes multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA (pre-2.07.17) and Winlog Lite SCADA (pre-2.07.17) . The flaw allows a remote attacker to read arbitrary files by sending crafted TCP packets to port 46824, issuing a file-open operation (opcode...

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

CVE-2012-4353

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the TCPIPSBinOpenFileFP function,...

CVE-2012-4353: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the TCPIPSBinOpenFileFP function,...

CVE-2012-4357: Improper Input Validation

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

PT-2012-5355

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to cause a denial of service, potentially resulting in an invalid 0x00 write...

PT-2012-5352

Name of the Vulnerable Software and Affected Versions Winlog Pro SCADA versions prior to 2.07.18 Winlog Lite SCADA versions prior to 2.07.18 Description The issue allows remote attackers to execute arbitrary code via a crafted TCP packet sent to port 46824, containing a negative integer after the...

PT-2012-5354

Name of the Vulnerable Software and Affected Versions Sielco Sistemi Winlog Pro SCADA versions prior to 2.07.17 Sielco Sistemi Winlog Lite SCADA versions prior to 2.07.17 Description The issue allows remote attackers to execute arbitrary code by referencing an invalid file-pointer index within a...