CVEvulnerability

CVE-2012-4356

4.3 MEDIUM Published 2012-08-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-22

Description

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.

Affected configurations

• sielcosistemi winlog pro (<= 2.07.16) • sielcosistemi winlog pro 2.06.00 • sielcosistemi winlog pro 2.06.03 • sielcosistemi winlog pro 2.06.04 • sielcosistemi winlog pro 2.06.06 • sielcosistemi winlog pro 2.06.09 • sielcosistemi winlog pro 2.06.10 • sielcosistemi winlog pro 2.06.12 • sielcosistemi winlog pro 2.06.13 • sielcosistemi winlog pro 2.06.14 • sielcosistemi winlog pro 2.06.18 • sielcosistemi winlog pro 2.06.21 • sielcosistemi winlog pro 2.06.24 • sielcosistemi winlog pro 2.06.25 • sielcosistemi winlog pro 2.06.28 • sielcosistemi winlog pro 2.06.40 • sielcosistemi winlog pro 2.06.46 • sielcosistemi winlog pro 2.06.50 • sielcosistemi winlog pro 2.06.60 • sielcosistemi winlog pro 2.06.73 • sielcosistemi winlog pro 2.06.86 • sielcosistemi winlog pro 2.07.00 • sielcosistemi winlog pro 2.07.01 • sielcosistemi winlog pro 2.07.08 • sielcosistemi winlog pro 2.07.09 • sielcosistemi winlog pro 2.07.11 • sielcosistemi winlog pro 2.07.14 • sielcosistemi winlog lite (<= 2.07.16) • sielcosistemi winlog lite 2.06.00 • sielcosistemi winlog lite 2.06.03 • sielcosistemi winlog lite 2.06.04 • sielcosistemi winlog lite 2.06.06 • sielcosistemi winlog lite 2.06.09 • sielcosistemi winlog lite 2.06.10 • sielcosistemi winlog lite 2.06.12 • sielcosistemi winlog lite 2.06.13 • sielcosistemi winlog lite 2.06.14 • sielcosistemi winlog lite 2.06.18 • sielcosistemi winlog lite 2.06.21 • sielcosistemi winlog lite 2.06.24 • sielcosistemi winlog lite 2.06.25 • sielcosistemi winlog lite 2.06.28 • sielcosistemi winlog lite 2.06.40 • sielcosistemi winlog lite 2.06.46 • sielcosistemi winlog lite 2.06.50 • sielcosistemi winlog lite 2.06.60 • sielcosistemi winlog lite 2.06.73 • sielcosistemi winlog lite 2.06.86 • sielcosistemi winlog lite 2.07.00 • sielcosistemi winlog lite 2.07.01 • sielcosistemi winlog lite 2.07.08 • sielcosistemi winlog lite 2.07.09 • sielcosistemi winlog lite 2.07.11 • sielcosistemi winlog lite 2.07.14

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References