Approved changes feed: RSS · Atom

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.04:*:*:*:*:*:*:*

part: a version: 2.06.04 update: *

VendorSielcosistemi (1b0e1c85-b4a7-587a-869d-f4651872bda4)
ProductWinlog Pro (eb47f593-fb6b-5276-8a4a-ef17d954223f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4359 vulnerable 2026-06-08 05:02:17.147253 Details available
Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.
Published: 2012-08-19T20:00:00.000Z
Updated: 2024-09-16T19:00:45.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4358 vulnerable 2026-06-08 05:02:17.145767 Details available
Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.
Published: 2012-08-19T20:00:00.000Z
Updated: 2024-09-16T17:43:02.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4357 vulnerable 2026-06-08 05:02:17.144227 Details available
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.
Published: 2012-08-19T20:00:00.000Z
Updated: 2024-09-17T03:48:07.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4356 vulnerable 2026-06-08 05:02:17.142778 Details available
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.
Published: 2012-08-19T20:00:00.000Z
Updated: 2024-09-16T18:19:09.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4355 vulnerable 2026-06-08 05:02:17.130144 Details available
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4354.
Published: 2012-08-19T20:00:00.000Z
Updated: 2024-09-16T20:21:45.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4354 vulnerable 2026-06-08 05:02:17.128670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4353 vulnerable 2026-06-08 05:02:17.120462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3815 vulnerable 2026-06-08 05:02:13.906543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4037 vulnerable 2026-06-08 04:59:28.842233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.