CVE-2012-4358
Estado: ModificadaAlta (9.3)—
Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.52%
- Percentil entre todas las CVEs puntuadas: 84
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-20
Referencias
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
- http://aluigi.org/adv/winlog_2-adv.txt
- http://secunia.com/advisories/49395
- http://www.sielcosistemi.com/en/news/index.html?id=69
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-4358",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-08-19T20:55:01.957",
"references": [
{
"url": "http://aluigi.org/adv/winlog_2-adv.txt",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/49395",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.sielcosistemi.com/en/news/index.html?id=69",
"source": "cve@mitre.org"
},
{
"url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://aluigi.org/adv/winlog_2-adv.txt",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/49395",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.sielcosistemi.com/en/news/index.html?id=69",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdf",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a port-46824 TCP packet with a crafted positive integer after the opcode."
},
{
"lang": "es",
"value": "Sielco Sistemi Winlog Pro SCADA antes de v2.07.17 y Winlog Lite SCADA antes de v2.07.17 no validan el valor de retorno de la función realloc, lo que permite a atacantes remotos provocar una denegación de servicio (mediante una operación de escritura de 0x00 no válida y la consiguiente caída del demonio) o posiblemente tener un impacto no especificado a través de un paquete enviado al puerto TCP 46824 con un número entero positivo tras el código de operación."
}
],
"lastModified": "2026-06-16T23:44:53.313",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8B4BB2C-EB82-456E-A9CA-72D6C862ECC6",
"versionEndIncluding": "2.07.16"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FF1B03C-54CF-4027-A58B-DFCE4FBA84CC"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D672AD8-9A7D-4257-8D1B-A79051F7EF49"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D2041DF-7469-4B19-9C58-A776EC09883A"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEE7A9FD-CFFF-4D15-9BB0-014984BF390D"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD4B97C6-1A3C-4D9F-ADD5-EE4D2B3FE6B6"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DBFE030-8A5F-478F-8BB0-1FF60C9A49FE"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16C51DFE-73CA-4961-BC26-F0E285A4AE1B"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "924BCED2-A2C9-4A7B-9291-C9D1725A23C0"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9728479C-278D-4E07-8597-DB32223A4E2C"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A146B9C7-2742-4ED7-BB9B-C5C91C23AA04"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F570F84-49C0-44F2-AE08-E5ACC40FDDEE"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EBD17A7-8F08-4ECA-B577-3D120B5B72FA"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5ABEFD13-6D5D-4617-B117-01A8DA34C4FC"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A22ED36-2B1A-4D04-86DB-E4CE0EB85DA9"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A3B466B-01FA-4D22-B0B0-A2ABBB748BB3"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AD7295A-26E9-477B-86C1-8260A1849356"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E44368E8-F333-41DF-A210-F03A82436A87"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA2674A1-474A-4976-AE2D-ADEEBED8BB38"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C0D5188-AEA9-427E-9852-FDB14ED5DB40"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.06.86:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C35A8A7C-49CD-4039-84E0-BF69286E69C9"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.07.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DCF41D0-4259-418A-B7BC-BC0A779A990A"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.07.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A684E73-28F5-45CB-98C8-D16C14EE2FB5"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.07.08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A63BA260-2527-4E92-BB70-B351C3849855"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.07.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0D4377B-FED5-4D0D-AA99-838F4BD79777"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.07.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0260871D-2CF7-4C7D-B7D1-B985B089190D"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:2.07.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F981871-2AF4-4160-8056-29D8E0F5B900"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDE55F0A-2038-452C-BF36-D91E0281DCE8",
"versionEndIncluding": "2.07.16"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47F58C24-BABB-4FC6-95E2-72F7F3211E67"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "358EA7A5-EC72-4767-B857-FB077EF318DB"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "210F68AE-1801-4F1C-8456-3388BCA76913"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B5FFAAC-A327-4BDE-8313-D47CBB5161FF"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D7D7FD6-3B86-42E7-B039-9C3570DB6813"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "831D86C8-2C16-435D-A3E7-7E2B3FCABDA2"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "115F4E5E-4C00-4B3E-B34F-6FE0F322E591"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "698B9BC0-5F57-4624-AEC6-864B4E4B1CE7"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "564CD457-97F2-436F-9AFD-F9F82A6BD368"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7398A76-C1C1-43BF-AFD3-A0B8177B63DF"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CF9E5D8-14E0-4506-A08D-97125F643279"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE30B897-69DB-461C-A382-B7124A809ABE"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "703A4316-7745-46AC-BC36-A110DEA57F16"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9BCF347-6E14-4BC8-AA22-6825C68EE67E"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8C7FD60-29C2-40C5-BBD1-5C7426FE17FB"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DD79175-3D49-4951-9F8F-47DDCDCD681D"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30FF1930-4632-4ED2-A135-DE9418AFDDBA"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEB19780-F6C7-44C5-8FBE-19A40EF94648"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54739E92-66BF-4A19-881B-DBA335B29967"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.06.86:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDCEFDF8-178A-42FE-A8D6-7C104E6F2F5B"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.07.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "110EDA4F-6790-40CF-846D-11622858A2E4"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.07.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA670181-0918-41F5-8AAE-684720ACFBF7"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.07.08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A05C562A-2760-4541-BD33-CF6B0F3C5E41"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.07.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A2B5F48-2ECA-423D-83C1-FA49D8EED361"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.07.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F83CFE33-7559-463C-A518-1F9FCBEB82F8"
},
{
"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:2.07.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41350C83-559C-4564-84FB-401917686921"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}