What’s Vulnerable › Vulnerabilities

CVE-2017-5161

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-13 · updated 2026-06-17
• Weakness: CWE-427

Description

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.

Affected products

• Sielcosistemi Winlog Lite: through 3.01.10
• Sielcosistemi Winlog Pro: through 3.01.10

References

• http://www.securityfocus.com/bid/96119
• https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01
• http://www.securityfocus.com/bid/96119
• https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01

Get alerted when CVE-2017-5161 or the next vulnerability affects your stack