CVE-2012-4356

CVE-2012-4356 describes multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro and Winlog Lite SCADA systems prior to version 2.07.17. Attackers can exploit this by sending specially crafted TCP packets to port 46824, using ".." in file paths to read arbitrary files on the affected system. The vulnerability has a CVSS score of 4.3, indicating a medium severity, as it allows remote attackers to achieve partial confidentiality impact without authentication, but requires some attack complexity. While not on the KEV catalog or Hot List, exploit modules exist in Metasploit and ExploitDB, suggesting readily available exploit code, though there is no evidence of active exploitation or significant community discussion.