Vulnerabilities

TI-2017-03279 CVE-2017-5161 · GHSA-25cv-w78q-2rmp

Uncontrolled search path in Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01

LOW 33

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01.

CVSS 3.0HIGH 7.2 Local High privileges User interaction EPSS 0.00938 Published 2017-02-13 No fix listed CWE-427

TI-2012-03714 CVE-2012-4359 · GHSA-2q8j-7fg9-w99h

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do…

MEDIUM 45

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0252 Published 2012-08-19 No fix listed CWE-20

TI-2012-03713 CVE-2012-4358 · GHSA-w34p-hhjq-x6m6

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do…

MEDIUM 45

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0252 Published 2012-08-19 No fix listed CWE-20

TI-2012-03712 CVE-2012-4357 · GHSA-gmjm-f66f-wrq7

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA…

MEDIUM 50

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid f…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07351 Published 2012-08-19 No fix listed CWE-20

TI-2012-03711 CVE-2012-4356 · GHSA-mv85-fm4m-5g93

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before…

MEDIUM 42

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a f…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.27377 Published 2012-08-19 No fix listed CWE-22

TI-2012-03710 CVE-2012-4355 · GHSA-grc2-72xj-8m4q

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA…

MEDIUM 51

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08186 Published 2012-08-19 No fix listed CWE-189

TI-2012-03709 CVE-2012-4354 · GHSA-cmg3-27ff-9pv7

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA…

MEDIUM 51

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08186 Published 2012-08-19 No fix listed CWE-189

TI-2012-03708 CVE-2012-4353 · GHSA-j7fr-8w47-9f6w

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before…

MEDIUM 61

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.24693 Published 2012-08-19 No fix listed CWE-119

TI-2012-03298 CVE-2012-3815 · GHSA-ffjv-cr82-26g3

Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and…

HIGH 69

Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.43813 Published 2012-06-27 No fix listed CWE-119

TI-2011-03564 CVE-2011-4037 · GHSA-rg3r-xjvj-536q

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before…

MEDIUM 47

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04514 Published 2011-12-22 No fix listed CWE-119

TI-2011-00444 CVE-2011-0517 · GHSA-m9xq-xgvf-jw86

Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run…

HIGH 68

Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.40462 Published 2011-01-20 No fix listed CWE-119

Vulnerabilities

Filters