CVE-2012-4356

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed by a file-read operation with opcode (1) 0x96, (2) 0x97, or (3) 0x98.

• CWE-22

• http://aluigi.org/adv/winlog_2-adv.txtExploit
• http://secunia.com/advisories/49395Vendor Advisory
• http://www.sielcosistemi.com/en/news/index.html?id=69
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdfUS Government Resource
• http://aluigi.org/adv/winlog_2-adv.txtExploit
• http://secunia.com/advisories/49395Vendor Advisory
• http://www.sielcosistemi.com/en/news/index.html?id=69
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-213-01.pdfUS Government Resource

Published

Aug 19, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4350Multiple unquoted Windows search path vulnerabilities in the…
• CVE-2012-4351Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x…
• CVE-2012-4352Multiple cross-site scripting (XSS) vulnerabilities in Stone…
• CVE-2012-4353Stack-based buffer overflow in RunTime.exe in Sielco Sistemi…
• CVE-2012-4354TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2…
• CVE-2012-4355TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2…
• CVE-2012-4357Array index error in Sielco Sistemi Winlog Pro SCADA before …
• CVE-2012-4358Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Li…
• CVE-2012-4359Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Li…
• CVE-2012-4360Cross-site scripting (XSS) vulnerability in the mod_pagespee…
• CVE-2012-4361lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Vi…
• CVE-2012-4362hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appl…