Description
A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in which the application does not verify string size before copying to memory; the attacker may then be able to crash the application or run arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WECON Technology Co., Ltd. LeviStudio HMI Editor | WECON Technology Co., Ltd. LeviStudio HMI Editor | — |
Advisories 1
- ICSA-17-285-02 WECON Technology Co., Ltd. LeviStudio HMI Editor CISA ICS & IT advisories · Oct 12, 2017
References
- https://ics-cert.us-cert.gov/advisories/ICSA-17-285-02
- 101250 vdb-entry
- 102493 vdb-entry