Description
WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WECON | LeviStudioU | All – ≤ 2019-09-21 | — |
Advisories 1
- ICSA-21-343-02 WECON LeviStudioU CISA ICS & IT advisories · Dec 9, 2021
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-343-02
- https://www.zerodayinitiative.com/advisories/ZDI-22-046/
- https://www.zerodayinitiative.com/advisories/ZDI-22-040/
- https://www.zerodayinitiative.com/advisories/ZDI-22-043/
- https://www.zerodayinitiative.com/advisories/ZDI-22-036/
- https://www.zerodayinitiative.com/advisories/ZDI-22-037/
- https://www.zerodayinitiative.com/advisories/ZDI-22-039/
- https://www.zerodayinitiative.com/advisories/ZDI-22-044/
- https://www.zerodayinitiative.com/advisories/ZDI-22-042/
- https://www.zerodayinitiative.com/advisories/ZDI-22-035/
- https://www.zerodayinitiative.com/advisories/ZDI-22-034/
- https://www.zerodayinitiative.com/advisories/ZDI-22-047/
- https://www.zerodayinitiative.com/advisories/ZDI-22-041/
- https://www.zerodayinitiative.com/advisories/ZDI-22-038/
- https://www.zerodayinitiative.com/advisories/ZDI-22-045/