CVE-2017-5161: An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, an...

Security readout for executives and security teams

CVE-2017-5161 affects Sielco Sistemi Winlog Lite and Winlog Pro SCADA software before version 3.02.01. The application may load a malicious DLL from an unsafe search path, giving an attacker the same system privileges as the Winlog application. The sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely in environments still running Winlog Lite or Winlog Pro SCADA software earlier than 3.02.01. Risk is higher where the SCADA workstation permits untrusted write access near application load paths or handles untrusted files. Treat this as a targeted operational technology hygiene issue, not a confirmed emergency. Prioritize asset discovery and remediation for exposed or high-privilege SCADA workstations, especially because compromise could inherit application privileges on systems supporting industrial operations. Mitigation focus: Identify any Winlog Lite or Winlog Pro installations below version 3.02.01.; Review Sielco Sistemi and CISA ICS-CERT guidance before applying production changes.; Upgrade affected Winlog installations to version 3.02.01 or later where supported..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.