CVE

Id
57599  
CVE No.
CVE-2012-4356  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.  
Phase
Assigned (20120819)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
594167 57599 CVE-2012-4356 MISC:http://aluigi.org/adv/winlog_2-adv.txt  View
594168 57599 CVE-2012-4356 MISC:http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf  View
594169 57599 CVE-2012-4356 CONFIRM:http://www.sielcosistemi.com/en/news/index.html?id=69  View
594170 57599 CVE-2012-4356 SECUNIA:49395  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28077 JVNDB-2012-003784 HP Virtual SAN Appliance 上で稼働する HP SAN/iQ における任意のコマンドを実行される脆弱性 HP Virtual SAN Appliance 上で稼働する HP SAN/iQ の lhn/public/network/ping には、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-4361 57599 7.7 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003784.html  View