CVE-2012-3815

This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog <= 2.07.14 by sending a maliciously crafted packet to the Runtime.exe service on port 46824, leading to arbitrary code execution.

This is a detailed technical analysis of multiple vulnerabilities in Sielco Sistemi Winlog SCADA/HMI software, including code execution, stack overflow, directory traversal, and memory corruption issues. The document provides disassembly snippets, exploitation details, and proof-of-concept commands.

This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog (versions 2.07.14-2.07.16) by sending a maliciously crafted packet to the Runtime.exe service on port 46824, leading to arbitrary code execution via a JMP ESP technique and egghunter.