Vulnerability in Sielcosistemi Winlog_lite

CVE-2012-4355

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, trigger…

EPSS: 0.285 (96.6th percentile) — read the EPSS interpretation.

Affected products

Sielcosistemi Winlog_lite — versions 2.06.00, 2.06.03, 2.06.04
Sielcosistemi Winlog_pro — versions 2.06.00, 2.06.03, 2.06.04
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (US Government Resource, x_refsource_MISC)
49395 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)