CVE-2017-5161 Other in Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01

What is CVE-2017-5161?

CVE-2017-5161 is a high-severity vulnerability in Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01, published on 13 Feb 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.

Weakness: CWE-427

Which versions are affected by CVE-2017-5161?

It affects 2 products.

Products include Sielcosistemi Winlog Lite, Sielcosistemi Winlog Pro.

How do I fix CVE-2017-5161?

No fix has been published for CVE-2017-5161 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-5161 being exploited?

There is no known exploitation of CVE-2017-5161 in the wild and no public exploit code.

Other vulnerabilities in Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01

• CVE-2012-4353 Memory corruption in n/a Critical 9.3
• CVE-2012-4354 Memory corruption in n/a Critical 9.3
• CVE-2012-4355 Integer overflow in n/a Critical 9.3
• CVE-2012-4357 Memory corruption in n/a Critical 9.3
• CVE-2012-4358 Denial of service in n/a Critical 9.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-25cv-w78q-2rmp.