Lucene search

K
SielcosistemiWinlog Pro

7 matches found

CVE
CVE
added 2012/08/19 8:55 p.m.47 views

CVE-2012-4358

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a po...

9.3CVSS7.5AI score0.01676EPSS
CVE
CVE
added 2012/08/19 8:55 p.m.45 views

CVE-2012-4354

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to a...

9.3CVSS7.8AI score0.30755EPSS
CVE
CVE
added 2012/08/19 8:55 p.m.40 views

CVE-2012-4356

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed ...

4.3CVSS7AI score0.56032EPSS
CVE
CVE
added 2012/08/19 8:55 p.m.38 views

CVE-2012-4355

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to a...

9.3CVSS7.9AI score0.30755EPSS
CVE
CVE
added 2012/08/19 8:55 p.m.38 views

CVE-2012-4359

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a po...

9.3CVSS7.6AI score0.01676EPSS
CVE
CVE
added 2012/08/19 8:55 p.m.34 views

CVE-2012-4353

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function,...

9.3CVSS8AI score0.5355EPSS
CVE
CVE
added 2012/08/19 8:55 p.m.32 views

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block...

9.3CVSS7.9AI score0.23452EPSS