CVE-2016-5781

The CVE-2016-5781 entry details a stack-based buffer overflow in WECON LeviStudio (an HMI programming software). A crafted file can trigger the overflow, enabling arbitrary code execution in the context of the affected process. Public sources (NVD/NVD-derived and ICS-CERT advisory) identify the v...

WECON LeviStudio Buffer Overflow Vulnerabilities

OVERVIEW Independent security researchers Rocco Calvi and Brian Gorenc, working with Trend Micro’s Zero Day Initiative, have identified buffer overflow vulnerabilities in WECON’s LeviStudio software. WECON has not released a product fix to addresses the buffer overflow vulnerabilities in the...