CVE-2018-10602

The CVE-2018-10602 entry maps to WECON LeviStudio products (notably LeviStudioU) with multiple stack-based buffer overflow vulnerabilities triggered when processing specially crafted project/files. Connected sources detail several distinct, file-parsing flaws that can lead to remote code executio...

CVE-2018-10606

CVE-2018-10606 affects LeviStudioU (Wecon LeviStudioU) with multiple heap-based buffer overflow vulnerabilities when processing specially crafted project files in LeviStudioU versions 1.8.29 and 1.8.44. The root cause is heap-based writes due to insufficient bounds checking in parsing project dat...

Denial of Service Vulnerability in LeviStudio

Ltd. is a high-tech company specializing in the research, development and sales of products in the field of automation. The company produces industrial human-machine interface and general-purpose PLC and other products, which are used in the industries of machinery supporting, metallurgy, chemica...

HEAP OVERFLOW VULNERABILITY in WECON LeviStudio

WECON LeviStudio is a set of HMI programming software from WECON China. A heap overflow vulnerability exists in WECON LeviStudio. An attacker can exploit the vulnerability to cause a program crash by constructing a malformed hmp file. Successful exploitation could lead to arbitrary code execution...

Buffer Overflow Vulnerability in Multiple WECON Products

WECON LeviStudio HMI Editor and PI Studio HMI Project Programmer are both HMI programming software from WECON Technologies, China. A buffer overflow vulnerability exists in WECON LeviStudio HMI Editor and PI Studio HMI Project Programmer versions prior to November 11, 2017 . A remote attacker can...

Buffer overflow

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

CVE-2018-7527

Summary: CVE-2018-7527 is a stack-based buffer overflow in Wecon LeviStudioU/PI Studio components that can be triggered by opening a specially crafted file. Concrete details across connected advisories show multiple vulnerable entry points, including LeviStudio HMI Editor (Version 1.10, part of L...

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

Wecon Technologies LeviStudio HMI Editor Stack Buffer Overflow Vulnerability (CNVD-2018-00908)

LeviStudio HMI Editor is an editor in HMI from China Wecon Technologies Wecon Technologies. The Wecon Technologies LeviStudio HMI Editor suffers from a stack buffer overflow vulnerability that could allow an attacker to remotely execute code by causing a stack buffer overflow via specially crafte...

Wecon Technologies LeviStudio HMI Editor Heap Buffer Overflow Vulnerability

LeviStudio HMI Editor is an editor in HMI from China Wecon Technologies Wecon Technologies. A heap buffer overflow vulnerability exists in the Wecon Technologies LeviStudio HMI Editor, which could result in a heap buffer overflow when a user opens a specially crafted malicious file...

WECON Technology Co., Ltd. LeviStudio HMI Editor

CVSS v3 5.3 ATTENTION: Locally exploitable/low skill level to exploit. Vendor: WECON Technology Co., Ltd. WECON Equipment: LeviStudio HMI Editor Vulnerabilities: Buffer Overflows AFFECTED PRODUCTS The following versions of LEVI Studio HMI Editor, an HMI programming software product, are affected:...

WECON LeviStudio HMI Heap Buffer Overflow Vulnerability

WECON LeviStudio is an HMI programming software. A heap buffer overflow vulnerability exists in WECON LeviStudio HMI that allows an attacker to remotely execute code...

CVE-2017-16717

A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified, which may allow remote code execution...

Heap overflow

A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2017-16717

A Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2017-16717

The CVE-2017-16717 entry affects WECON LeviStudio HMI (heap-based buffer overflow in LeviStudio HMI/Driver handling of project data) that may allow remote code execution. Public docs (ZDI-17-1001) specify exploitation requires user interaction (visiting a malicious page or opening a malicious fil...

WECON LeviStudio PLC Driver Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WECON LeviStudio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of...

WECON Technology Co., Ltd. LeviStudio HMI Editor

CVSS v3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: WECON Technology Co., Ltd. WECON Equipment: LeviStudio HMI editor Vulnerability: Heap-based Buffer Overflow AFFECTED PRODUCTS All versions of LeviStudio HMI, an HMI editor, are affected. IMPACT Successful exploitation...