← Back

CVE-2012-4357

nvd nist
Published: Aug 19, 2012Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.

Affected (54)

2 products
Winlog Pro
Winlog Lite
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Sielcosistemi
Up to 2.07.16
Version 2.06.00
Version 2.06.03
Version 2.06.04
Version 2.06.06
Version 2.06.09
Version 2.06.10
Version 2.06.12
Version 2.06.13
Version 2.06.14
Version 2.06.18
Version 2.06.21
Version 2.06.24
Version 2.06.25
Version 2.06.28
Version 2.06.40
Version 2.06.46
Version 2.06.50
Version 2.06.60
Version 2.06.73
Version 2.06.86
Version 2.07.00
Version 2.07.01
Version 2.07.08
Version 2.07.09
Version 2.07.11
Version 2.07.14
Configuration B
27 vulnerable
Vulnerable SoftwareAffected Versions
Sielcosistemi
Up to 2.07.16
Version 2.06.00
Version 2.06.03
Version 2.06.04
Version 2.06.06
Version 2.06.09
Version 2.06.10
Version 2.06.12
Version 2.06.13
Version 2.06.14
Version 2.06.18
Version 2.06.21
Version 2.06.24
Version 2.06.25
Version 2.06.28
Version 2.06.40
Version 2.06.46
Version 2.06.50
Version 2.06.60
Version 2.06.73
Version 2.06.86
Version 2.07.00
Version 2.07.01
Version 2.07.08
Version 2.07.09
Version 2.07.11
Version 2.07.14

References (8)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource

Timeline

No history available yet.