PatchTheCVE: winlog prohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-5161: An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Whttps://patchthecve.com/cve/CVE-2017-5161.htmlhttps://patchthecve.com/cve/CVE-2017-5161.htmlWed, 17 Jun 2026 01:20:04 +0000HIGH 7.2: An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could gCVE-2012-4359: Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the returnhttps://patchthecve.com/cve/CVE-2012-4359.htmlhttps://patchthecve.com/cve/CVE-2012-4359.htmlTue, 16 Jun 2026 23:44:53 +0000HIGH 9.3: Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a porCVE-2012-4358: Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the returnhttps://patchthecve.com/cve/CVE-2012-4358.htmlhttps://patchthecve.com/cve/CVE-2012-4358.htmlTue, 16 Jun 2026 23:44:53 +0000HIGH 9.3: Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 do not validate the return value of the realloc function, which allows remote attackers to cause a denial of service (invalid 0x00 write operation and daemon crash) or possibly have unspecified other impact via a porCVE-2012-4357: Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 mighthttps://patchthecve.com/cve/CVE-2012-4357.htmlhttps://patchthecve.com/cve/CVE-2012-4357.htmlTue, 16 Jun 2026 23:44:53 +0000HIGH 9.3: Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code block.CVE-2012-4356: Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Litehttps://patchthecve.com/cve/CVE-2012-4356.htmlhttps://patchthecve.com/cve/CVE-2012-4356.htmlTue, 16 Jun 2026 23:44:53 +0000MEDIUM 4.3: Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow remote attackers to read arbitrary files via port-46824 TCP packets specifying a file-open operation with opcode 0x78 and a .. (dot dot) in a pathname, followed bCVE-2012-4355: TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allowshttps://patchthecve.com/cve/CVE-2012-4355.htmlhttps://patchthecve.com/cve/CVE-2012-4355.htmlTue, 16 Jun 2026 23:44:52 +0000HIGH 9.3: TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted negative integer after the opcode, triggering incorrect function-pointer processing that can lead to a CVE-2012-4354: TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allowshttps://patchthecve.com/cve/CVE-2012-4354.htmlhttps://patchthecve.com/cve/CVE-2012-4354.htmlTue, 16 Jun 2026 23:44:52 +0000HIGH 9.3: TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a port-46824 TCP packet with a crafted positive integer after the opcode, triggering incorrect function-pointer processing that can lead to a CVE-2012-4353: Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite Shttps://patchthecve.com/cve/CVE-2012-4353.htmlhttps://patchthecve.com/cve/CVE-2012-4353.htmlTue, 16 Jun 2026 23:44:52 +0000HIGH 9.3: Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, CVE-2012-3815: Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before https://patchthecve.com/cve/CVE-2012-3815.htmlhttps://patchthecve.com/cve/CVE-2012-3815.htmlTue, 16 Jun 2026 23:43:56 +0000HIGH 9.3: Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 46824. NOTE: some of these details are obtained from third party information.CVE-2011-4037: Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assistehttps://patchthecve.com/cve/CVE-2011-4037.htmlhttps://patchthecve.com/cve/CVE-2011-4037.htmlTue, 16 Jun 2026 23:34:19 +0000HIGH 9.3: Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file.