CVE-2012-4356: Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog L...

Security readout for executives and security teams

Older Sielco Sistemi Winlog Pro and Winlog Lite SCADA versions could let a remote attacker read files from the system by abusing path traversal in the product’s service protocol. For industrial environments, file disclosure can expose configuration, credentials, or operational details that support deeper compromise. Exposure is most likely in environments still running Winlog Pro or Winlog Lite SCADA before 2.07.17, particularly where TCP/46824 is reachable beyond trusted control-system networks. The provided data does not prove broad internet exposure. Prioritize remediation if Winlog is used in production control environments or reachable from less-trusted networks. The issue is old, but legacy SCADA systems often persist; exposure could disclose sensitive operational files and aid follow-on attacks. Mitigation focus: Upgrade Winlog Pro or Winlog Lite SCADA to 2.07.17 or later.; Restrict TCP/46824 to trusted engineering or management hosts only.; Block direct internet access to affected SCADA services..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.