CVE-2012-4353: Sielcosistemi Winlog Lite

High severity, CVSS 9.3. EPSS: 24.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815. NOTE: some of these details are obtained from third party information.

Affected products

• Sielcosistemi Winlog Lite: up to and including 2.07.16; version 2.06.00 only; version 2.06.03 only; version 2.06.04 only; version 2.06.06 only; version 2.06.09 only; …
• Sielcosistemi Winlog Pro: up to and including 2.07.16; version 2.06.00 only; version 2.06.03 only; version 2.06.04 only; version 2.06.06 only; version 2.06.09 only; …

Published 2012-08-19. Last modified 2026-06-16.