CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
91.0%
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.
Vendor | Product | Version | CPE |
---|---|---|---|
sielcosistemi | winlog_pro | * | cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.00 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.00:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.03 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.03:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.04 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.04:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.06 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.06:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.09 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.09:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.10 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.10:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.12 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.12:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.13 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.13:*:*:*:*:*:*:* |
sielcosistemi | winlog_pro | 2.06.14 | cpe:2.3:a:sielcosistemi:winlog_pro:2.06.14:*:*:*:*:*:*:* |