CVEvulnerability

CVE-2012-4359

9.3 HIGH Published 2012-08-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.

Affected configurations

• sielcosistemi winlog pro (<= 2.07.17) • sielcosistemi winlog pro 2.06.00 • sielcosistemi winlog pro 2.06.03 • sielcosistemi winlog pro 2.06.04 • sielcosistemi winlog pro 2.06.06 • sielcosistemi winlog pro 2.06.09 • sielcosistemi winlog pro 2.06.10 • sielcosistemi winlog pro 2.06.12 • sielcosistemi winlog pro 2.06.13 • sielcosistemi winlog pro 2.06.14 • sielcosistemi winlog pro 2.06.18 • sielcosistemi winlog pro 2.06.21 • sielcosistemi winlog pro 2.06.24 • sielcosistemi winlog pro 2.06.25 • sielcosistemi winlog pro 2.06.28 • sielcosistemi winlog pro 2.06.40 • sielcosistemi winlog pro 2.06.46 • sielcosistemi winlog pro 2.06.50 • sielcosistemi winlog pro 2.06.60 • sielcosistemi winlog pro 2.06.73 • sielcosistemi winlog pro 2.06.86 • sielcosistemi winlog pro 2.07.00 • sielcosistemi winlog pro 2.07.01 • sielcosistemi winlog pro 2.07.08 • sielcosistemi winlog pro 2.07.09 • sielcosistemi winlog pro 2.07.11 • sielcosistemi winlog pro 2.07.14 • sielcosistemi winlog pro 2.07.16 • sielcosistemi winlog lite (<= 2.07.17) • sielcosistemi winlog lite 2.06.00 • sielcosistemi winlog lite 2.06.03 • sielcosistemi winlog lite 2.06.04 • sielcosistemi winlog lite 2.06.06 • sielcosistemi winlog lite 2.06.09 • sielcosistemi winlog lite 2.06.10 • sielcosistemi winlog lite 2.06.12 • sielcosistemi winlog lite 2.06.13 • sielcosistemi winlog lite 2.06.14 • sielcosistemi winlog lite 2.06.18 • sielcosistemi winlog lite 2.06.21 • sielcosistemi winlog lite 2.06.24 • sielcosistemi winlog lite 2.06.25 • sielcosistemi winlog lite 2.06.28 • sielcosistemi winlog lite 2.06.40 • sielcosistemi winlog lite 2.06.46 • sielcosistemi winlog lite 2.06.50 • sielcosistemi winlog lite 2.06.60 • sielcosistemi winlog lite 2.06.73 • sielcosistemi winlog lite 2.06.86 • sielcosistemi winlog lite 2.07.00 • sielcosistemi winlog lite 2.07.01 • sielcosistemi winlog lite 2.07.08 • sielcosistemi winlog lite 2.07.09 • sielcosistemi winlog lite 2.07.11 • sielcosistemi winlog lite 2.07.14 • sielcosistemi winlog lite 2.07.16

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References