Path Traversal in Sielcosistemi Winlog_lite
CVE-2012-4356
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.606 (98.3th percentile) — read the EPSS interpretation.
Affected products
- Sielcosistemi Winlog_lite — versions 2.06.00, 2.06.03, 2.06.04
- Sielcosistemi Winlog_pro — versions 2.06.00, 2.06.03, 2.06.04
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_MISC)
- 49395 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2012-4356?
- CVE-2012-4356 is a vulnerability in Sielcosistemi Winlog_lite, classified under Path Traversal. Published 2012-08-19.
- Is CVE-2012-4356 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.