Intrusion PreventionSielco.Sistemi.Winlog.File.Access.Directory.Traversal
Description
This indicates an attack attempt against a Directory Traversal vulnerability on Sielco Sistemi system
The vulnerability is due to insufficient input validation in the application when handling a crafted request. A remote attacker may be able to to access arbitrary files within the system via a crafted request.
Affected Products
Winlog Pro SCADA, all versions prior to 2.07.18
Winlog Lite SCADA, all versions prior to 2.07.18
Impact
System Compromise: Remote attackers can gain information of vulnerable system
Recommended Actions
Apply the most recent upgrade or patch from the vendor
http://www.sielcosistemi.com/en/news/index.html?id=70
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
References
http://www.securityfocus.com/bid/54212/info| ID | 42368 |
| Created | May 10, 2016 |
| Updated | Jun 22, 2020 |
| Risk |
|
| CVE ID | CVE-2012-4356 |
| Exploit Prediction Score | 1.69% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | SCADA |