CVE-2012-4356
Sielcosistemi Winlog Pro < 2.07.16 - Path Traversal
Title source: ruleDescription
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.
Exploits (2)
metasploit
WORKING POC
by Luigi Auriemma, juan vazquez · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/scada/sielco_winlog_fileaccess.rb
Scores
EPSS
0.6063
EPSS Percentile
98.3%
Details
CWE
CWE-22
Status
published
Products (50)
sielcosistemi/winlog_lite
2.06.00
sielcosistemi/winlog_lite
2.06.03
sielcosistemi/winlog_lite
2.06.04
sielcosistemi/winlog_lite
2.06.06
sielcosistemi/winlog_lite
2.06.09
sielcosistemi/winlog_lite
2.06.10
sielcosistemi/winlog_lite
2.06.12
sielcosistemi/winlog_lite
2.06.13
sielcosistemi/winlog_lite
2.06.14
sielcosistemi/winlog_lite
2.06.18
... and 40 more
Published
Aug 19, 2012
Tracked Since
Feb 18, 2026