VulnerabilityModified
CVE-2012-3815
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824.
HIGH 9.3EPSS 44.2%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 44.2%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 44.19% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- sielcosistemi/winlog lite · sielcosistemi/winlog pro
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0009.htmlExploit
- http://secunia.com/advisories/49395Vendor Advisory
- http://securitytracker.com/id?1027128
- http://www.osvdb.org/82654
- http://www.s3cur1ty.de/m1adv2012-001Exploit
- http://www.securityfocus.com/bid/53811Exploit
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.sielcosistemi.com/en/news/index.html?id=70
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76060
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0009.htmlExploit
- http://secunia.com/advisories/49395Vendor Advisory
- http://securitytracker.com/id?1027128
- http://www.osvdb.org/82654
- http://www.s3cur1ty.de/m1adv2012-001Exploit
- http://www.securityfocus.com/bid/53811Exploit
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.sielcosistemi.com/en/news/index.html?id=70
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76060
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.