CVE-2012-4356

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to…

published August 19, 2012

CVSS
—
EPSS
27%
Percentile
98.1
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27377 · 98.1th percentile
Published
2012-08-19T20:00Z
EPSS history
Timeline
  • 19 AUG 20:00Z
    Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to…
    cvelistv5