CVE-2012-4354

Опубликовано: 19 авг. 2012

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to a buffer overflow. NOTE: some of these details are obtained from third party information.

Ссылки

http://aluigi.org/adv/winlog_2-adv.txt
Exploit
http://secunia.com/advisories/49395
Vendor Advisory
http://www.sielcosistemi.com/en/news/index.html?id=69
http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
US Government Resource
http://aluigi.org/adv/winlog_2-adv.txt
Exploit
http://secunia.com/advisories/49395
Vendor Advisory
http://www.sielcosistemi.com/en/news/index.html?id=69
http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*

Версия до 2.07.16 (включая)

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.00:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.03:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.04:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.06:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.09:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.10:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.12:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.13:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.14:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.18:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.21:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.24:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.25:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.28:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.40:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.46:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.50:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.60:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.73:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.06.86:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.07.00:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.07.01:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.07.08:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.07.09:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.07.11:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_pro:2.07.14:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:sielcosistemi:winlog_lite:*:*:*:*:*:*:*:*

Версия до 2.07.16 (включая)

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.00:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.03:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.04:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.06:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.09:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.10:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.12:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.13:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.14:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.18:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.21:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.24:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.25:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.28:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.40:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.46:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.50:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.60:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.73:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.06.86:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.07.00:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.07.01:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.07.08:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.07.09:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.07.11:*:*:*:*:*:*:*

cpe:2.3:a:sielcosistemi:winlog_lite:2.07.14:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.30755

Средний

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-cmg3-27ff-9pv7

github

больше 3 лет назад