2012-08-19 - CVE Archive

CVE-2012-4355 CRITICAL POC THREAT Emergency

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 28.5%.

Buffer Overflow RCE Winlog Pro Winlog Lite

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

28.5%

Threat

4.2

CVE-2012-4354 CRITICAL POC THREAT Emergency

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 28.5%.

Buffer Overflow RCE Winlog Pro Winlog Lite

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

28.5%

Threat

4.2

CVE-2012-4357 CRITICAL POC THREAT Emergency

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 21.5%.

RCE Winlog Pro Winlog Lite

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

21.5%

Threat

4.0

CVE-2012-4353 CRITICAL POC PATCH THREAT Act Now

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 14.8%.

Buffer Overflow RCE Winlog Pro Winlog Lite

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

14.8%

CVE-2012-4359 CRITICAL POC Act Now

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Denial Of Service Winlog Pro Winlog Lite

NVD

CVSS 2.0

9.3

EPSS

1.7%

CVE-2012-4358 CRITICAL POC Act Now

Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Denial Of Service Winlog Pro Winlog Lite

NVD

CVSS 2.0

9.3

EPSS

1.7%