CVE-2012-4356
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 27%
from disclosure to weapon0 days
Published on NVDAug 19
1st PoCJun 27
exploitation probability
27%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/19409unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.