CVE-2012-4353
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD
Description
Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815. NOTE: some of these details are obtained from third party information.
Affected (54)
Products: Sielcosistemi: Winlog Pro, Winlog Lite
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2.07.16 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2.07.16 |
References (8)
Source: cve@mitre.org
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Timeline
No history available yet.