CVE-2012-3815
Winlog Lite < 2.07.18 - Remote Code Execution via Crafted TCP Packet
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-3815.
PoCs published by Metasploit, including Metasploit module exploits/windows/scada/winlog_runtime_2.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog <= 2.07.14 by sending a maliciously crafted packet to the Runtime.exe service on port 46824, leading to arbitrary code execution.
Description
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information.
Exploits (3)
This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog <= 2.07.14 by sending a maliciously crafted packet to the Runtime.exe service on port 46824, leading to arbitrary code execution.
This is a detailed technical analysis of multiple vulnerabilities in Sielco Sistemi Winlog SCADA/HMI software, including code execution, stack overflow, directory traversal, and memory corruption issues. The document provides disassembly snippets, exploitation details, and proof-of-concept commands.
This Metasploit module exploits a buffer overflow in Sielco Sistemi Winlog (versions 2.07.14-2.07.16) by sending a maliciously crafted packet to the Runtime.exe service on port 46824, leading to arbitrary code execution via a JMP ESP technique and egghunter.