Vulnerability in Sielcosistemi Winlog_lite
CVE-2017-5161
An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability ha…
EPSS: 0.001 (30.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Sielcosistemi Winlog_lite
- Sielcosistemi Winlog_pro
- N/a Sielco Sistemi Winlog Scada Software Prior To Version 3.02.01 — versions Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)
Frequently asked questions
- What is CVE-2017-5161?
- CVE-2017-5161 is a high-severity vulnerability in Sielcosistemi Winlog_lite, classified under Uncontrolled Search Path Element. CVSS score: 7.2/10. Published 2017-02-13.
- How severe is CVE-2017-5161?
- High severity. CVSS v3 base score is 7.2 out of 10.