PatchTheCVEwinlog lite vulnerabilities and fixes
Recent CVEs affecting winlog lite, with upgrade or downgrade steps. 10 tracked.
Also searched as: winloglite.
winlog lite has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2017-02-13. Highest priority: CVE-2012-4353 (score 62/100).
- CVE-2017-5161 HIGH 7.2 UPGRADE UPGRADE An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and W
- CVE-2012-4359 HIGH 9.3 UPGRADE UPGRADE Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return
- CVE-2012-4358 HIGH 9.3 UPGRADE UPGRADE Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return
- CVE-2012-4357 HIGH 9.3 UPGRADE UPGRADE Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might
- CVE-2012-4356 MEDIUM 4.3 UPGRADE UPGRADE Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite
- CVE-2012-4355 HIGH 9.3 UPGRADE UPGRADE TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows
- CVE-2012-4354 HIGH 9.3 UPGRADE UPGRADE TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows
- CVE-2012-4353 HIGH 9.3 UPGRADE UPGRADE Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite S
- CVE-2012-3815 HIGH 9.3 UPGRADE UPGRADE Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before
- CVE-2011-4037 HIGH 9.3 UPGRADE UPGRADE Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assiste
FAQ
How do I fix winlog lite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is winlog lite being exploited right now?
None of the tracked winlog lite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which winlog lite CVE should I patch first?
CVE-2012-4353 currently ranks highest (62/100): Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite S.