Sielco Sistemi Winlog Multiple Vulnerabilities

An attacker could exploit these vulnerabilities to gain unauthorized access to the SCADA system, modify process data, or execute arbitrary commands on the historian and engineering workstations, potentially disrupting energy generation, distribution, or monitoring operations.

Energy sector organizations operating Sielco Sistemi Winlog Pro or Winlog Lite SCADA systems for real-time monitoring and control of power generation, transmission, or distribution infrastructure should assess their exposure. This includes utility control rooms, remote terminal units (RTUs), and engineering workstations used to configure or troubleshoot SCADA operations.

An attacker could leverage the path traversal and access control vulnerabilities to read or write arbitrary files on the Winlog system. Memory corruption flaws could be used to achieve remote code execution on the SCADA server or engineering workstations that run Winlog software.