Threat Encyclopedia

WECON.LeviStudioU.ScreenInfo.ScrnFile.Heap.Buffer.Overflow

description-logoDescription

This indicates an attack attempt to exploit a Buffer Overflow Vulnerability in Wecon LeviStudioU.
The vulnerability is due to improper validation of the length of attribute value in the .ump project XML file. A remote attacker could exploit the vulnerability by enticing a user into opening a crafted .ump project XML file. Successful exploitation could allow the attacker to execute arbitrary code under the context as SYSTEM.

affected-products-logoAffected Products

Wecon LeviStudioU Release Build 2019-09-21 and prior

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-03

CVE References

CVE-2021-23157

Telemetry logoTelemetry