GCVE - cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sielcosistemi (`1b0e1c85-b4a7-587a-869d-f4651872bda4`)
Product	Winlog Pro (`eb47f593-fb6b-5276-8a4a-ef17d954223f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-5161`	vulnerable	2026-06-08 05:09:39.236057	Details available An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL. Published: 2017-02-13T21:00:00.000Z Updated: 2024-08-05T14:55:34.973Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96119 https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4359`	vulnerable	2026-06-08 05:02:17.147194	Details available Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358. Published: 2012-08-19T20:00:00.000Z Updated: 2024-09-16T19:00:45.165Z Open on db.gcve.eu Reference links http://aluigi.org/adv/winlog_2-adv.txt http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf http://secunia.com/advisories/49395 http://www.sielcosistemi.com/en/news/index.html?id=70	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4358`	vulnerable	2026-06-08 05:02:17.145713	Details available Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode. Published: 2012-08-19T20:00:00.000Z Updated: 2024-09-16T17:43:02.375Z Open on db.gcve.eu Reference links http://aluigi.org/adv/winlog_2-adv.txt http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf http://secunia.com/advisories/49395 http://www.sielcosistemi.com/en/news/index.html?id=69	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4357`	vulnerable	2026-06-08 05:02:17.144170	Details available Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block. Published: 2012-08-19T20:00:00.000Z Updated: 2024-09-17T03:48:07.027Z Open on db.gcve.eu Reference links http://aluigi.org/adv/winlog_2-adv.txt http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf http://secunia.com/advisories/49395 http://www.sielcosistemi.com/en/news/index.html?id=69	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4356`	vulnerable	2026-06-08 05:02:17.142716	Details available Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98. Published: 2012-08-19T20:00:00.000Z Updated: 2024-09-16T18:19:09.886Z Open on db.gcve.eu Reference links http://aluigi.org/adv/winlog_2-adv.txt http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf http://secunia.com/advisories/49395 http://www.sielcosistemi.com/en/news/index.html?id=69	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4355`	vulnerable	2026-06-08 05:02:17.130084	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4354`	vulnerable	2026-06-08 05:02:17.128607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4353`	vulnerable	2026-06-08 05:02:17.120389	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3815`	vulnerable	2026-06-08 05:02:13.904861	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4037`	vulnerable	2026-06-08 04:59:28.840336	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0517`	vulnerable	2026-06-08 04:56:37.656443	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.