CVE-2017-5161

highPriorität · verfolgen · 29EPSS 0.009 · 61. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.94% (61st) EPSS

CVSS 9.3 · high

Is it mine?

7 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · bewertet 2026-10-27

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationWinlog Lite SCADA Softwarecisa_csaf_ot
The most current versions of Winlog Lite and Winlog Pro SCADA software are available here:
https://www.sielcosistemi.com/en/download/public/download.html
MitigationWinlog Pro SCADA Softwarecisa_csaf_ot
The most current versions of Winlog Lite and Winlog Pro SCADA software are available here:
https://www.sielcosistemi.com/en/download/public/download.html

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 10

v3.07.2highCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.6 · Auswirkung 6

v3.07.2highCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · CISA US

v3.06.6mediumCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-427USprimärCWE-427US

betroffene Produkte (7)

Betroffene Produkte und Versionsbereiche.

Winlog Lite SCADA Software: versions prior to Version 3.02.01alle Versionencisa_csaf_otUS
Winlog Pro SCADA Software: versions prior to Version 3.02.01alle Versionencisa_csaf_otUS
Sielco Sistemi Winlog Lite SCADA Software< 3.02.01cisa_csaf_otUS
Sielco Sistemi Winlog Pro SCADA Software< 3.02.01cisa_csaf_otUS
n/a Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01≤ Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01enisa_euvdEU
sielcosistemi winlog lite≤ 3.01.10nvdUScpe:2.3:a:sielcosistemi:winlog_lite:*:*:*:*:*:*:*:*
sielcosistemi winlog pro≤ 3.01.10nvdUScpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-17-038-01ICSA-17-038-01_Sielco Sistemi Winlog SCADA Software2017-02-07icsa · cisa_csaf_otUS
Researcher Karn Ganeshen identified this vulnerability.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot nvd NVD CVE.org MITRE

veröffentlicht 2017-02-13geändert 2026-06-17

verwandt (1,387)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-110936DE	medium6.7OT kritisch	0.97% (62nd)	KEV	2026-10-15
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search p…
CVE-2020-3433US	high7.8OT kritisch	10.0% (96th)	KEV	2020-08-17
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL…
CVE-2020-3153US	medium6.5OT kritisch	28.3% (98th)	KEV	2020-02-19
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system…
CVE-2020-27955US	critical9.8	82.3% (100th)	Exploit	2020-11-05
Git LFS 2.12.0 allows Remote Code Execution.
CVE-2017-6517US	critical9.8	46.3% (99th)	—	2017-03-23
Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists…

+1382 weitere

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

http://www.securityfocus.com/bid/96119 cnnvd
https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01 cnnvd
https://www.sielcosistemi.com/Patchcnnvd
http://www.securityfocus.com/bid/96119 enisa_euvd
https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01 enisa_euvd
http://www.securityfocus.com/bid/96119Third Party AdvisoryVDB Entrynvd
https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01MitigationThird Party AdvisoryUS Government Resourcenvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan