CVE-2017-5161

{"containers": {"cna": {"affected": [{"product": "Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01", "vendor": "n/a", "versions": [{"status": "affected", "version": "Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01"}]}], "datePublic": "2017-02-13T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL."}], "problemTypes": [{"descriptions": [{"description": "Sielco Sistemi Winlog SCADA Software DLL Hijacking", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-02-14T10:57:01.000Z", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"name": "96119", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/96119"}, {"tags": ["x_refsource_MISC"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2017-5161", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01", "version": {"version_data": [{"version_value": "Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Sielco Sistemi Winlog SCADA Software DLL Hijacking"}]}]}, "references": {"reference_data": [{"name": "96119", "refsource": "BID", "url": "http://www.securityfocus.com/bid/96119"}, {"name": "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T14:55:34.973Z"}, "title": "CVE Program Container", "references": [{"name": "96119", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/96119"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2017-5161", "datePublished": "2017-02-13T21:00:00.000Z", "dateReserved": "2017-01-03T00:00:00.000Z", "dateUpdated": "2024-08-05T14:55:34.973Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01", "vendor": "n/a", "versions": [{"status": "affected", "version": "Sielco Sistemi Winlog SCADA Software prior to Version 3.02.01"}]}], "source": "ics-cert@hq.dhs.gov"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sielcosistemi:winlog_lite:*:*:*:*:*:*:*:*", "matchCriteriaId": "03372132-C2BD-471F-A2D0-3CE01A3BB432", "versionEndIncluding": "3.01.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*", "matchCriteriaId": "6BE1A9F0-0F59-4133-8876-16CF6936ACEC", "versionEndIncluding": "3.01.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL."}, {"lang": "es", "value": "Ha sido descubierto un problema en Sielco Sistemi Software Winlog Lite SCADA Software, versiones anteriores a la Versi\u00f3n 3.02.01 y Winlog Pro SCADA Software, versiones anteriores a la Versi\u00f3n 3.02.01. Se ha identificado una vulnerabilidad no controlada del elemento de ruta de acceso de b\u00fasqueda (DLL Hijacking). La explotaci\u00f3n de esta vulnerabilidad podr\u00eda dar a un atacante acceso al sistema con el mismo nivel de privilegio que la aplicaci\u00f3n que utiliza la DLL maliciosa."}], "id": "CVE-2017-5161", "lastModified": "2026-06-17T01:20:04.423", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 0.6, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-02-13T21:59:02.830", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/96119"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/96119"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}