Lucene search

IcscertCVE-2017-13999

HistoryOct 17, 2017 - 10:29 p.m.

CVE-2017-13999

2017-10-1722:29:00

CWE-119

CWE-121

icscert

web.nvd.nist.gov

cve-2017-13999

buffer overflow

wecon levi studio

hmi editor

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

69.2%

JSON

A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in which the application does not verify string size before copying to memory; the attacker may then be able to crash the application or run arbitrary code.

Affected configurations

Nvd

Node

we-conlevi_studio_hmi_editorRange≤1.8.1

VendorProductVersionCPE
we-conlevi_studio_hmi_editor*cpe:2.3:a:we-con:levi_studio_hmi_editor:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
we-con	levi_studio_hmi_editor	*	cpe:2.3:a:we-con:levi_studio_hmi_editor::::::::

CNA Affected

[
  {
    "product": "WECON Technology Co., Ltd. LeviStudio HMI Editor",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "WECON Technology Co., Ltd. LeviStudio HMI Editor"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101250

www.securityfocus.com/bid/102493

ics-cert.us-cert.gov/advisories/ICSA-17-285-02

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

69.2%

JSON

Related for CVE-2017-13999