Vulnerability Details CVE-2012-4359
Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted negative integer after the opcode. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4358.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.4%
CVSS Severity
CVSS v2 Score 9.3
References
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=70
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=70
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
Products affected by CVE-2012-4359
-
cpe:2.3:a:sielcosistemi:winlog_lite:-
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.00
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.03
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.04
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.06
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.09
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.10
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.12
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.13
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.14
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.18
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.21
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.24
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.25
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.28
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.40
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.46
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.50
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.60
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.73
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.06.86
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.00
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.01
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.08
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.09
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.11
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.14
-
cpe:2.3:a:sielcosistemi:winlog_lite:2.07.16
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.00
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.03
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.04
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.06
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.09
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.10
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.12
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.13
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.14
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.18
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.21
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.24
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.25
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.28
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.40
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.46
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.50
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.60
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.73
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.06.86
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.00
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.01
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.08
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.09
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.11
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.14
-
cpe:2.3:a:sielcosistemi:winlog_pro:2.07.16