CVE-2011-0517
Sielco Sistemi Winlog Pro < 2.07.00 - Remote Code Execution via Crafted 0x02 Opcode
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2011-0517.
PoCs published by Metasploit, Luigi Auriemma, Luigi Auriemma, MC, including Metasploit module exploits/windows/scada/winlog_runtime.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog <= 2.07.00 by sending a maliciously crafted packet to the Runtime.exe service, allowing arbitrary code execution. The exploit uses SEH overwrites and a custom payload to achieve remote code execution.
Description
Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.
Exploits (3)
This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog <= 2.07.00 by sending a maliciously crafted packet to the Runtime.exe service, allowing arbitrary code execution. The exploit uses SEH overwrites and a custom payload to achieve remote code execution.
This exploit targets a stack overflow vulnerability in Sielco Sistemi Winlog SCADA software (versions <= 2.07.00) via opcode 0x02 in the TCP/IP server component. The PoC uses a crafted packet to overflow a 60-byte buffer, leading to potential remote code execution.
This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog <= 2.07.00 by sending a maliciously crafted packet to the Runtime.exe service, allowing arbitrary code execution. The exploit leverages SEH overwrites and a known return address to achieve RCE.