Lucene search
+L

415 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.26 views

WECON LeviStudioU UMP File Parsing XY Tag WordAddr5 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.22 views

WECON LeviStudioU UMP File Parsing Alarm Tag WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.25 views

WECON LeviStudioU UMP File Parsing Trend Tag WordAddr12 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.28 views

WECON LeviStudioU UMP File Parsing BaseSet Tag CurScrIdAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.25 views

WECON LeviStudioU UMP File Parsing XY Tag WordAddr9 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

7.8CVSS7.6AI score0.02743EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/21 12:00 a.m.32 views

Wecon Technologies LeviStudioU 缓冲区错误漏洞

Wecon Technologies LeviStudioU is a suite of HMI programming software from China's Wecon Technologies. A security vulnerability exists in WECON LeviStudioU, which can be exploited by attackers to remotely execute code...

7.8CVSS7.4AI score0.08595EPSS
SaveExploits0References18
ICS
ICS
added 2021/12/21 12:00 a.m.68 views

WECON LeviStudioU

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: WECON Equipment: LeviStudioU Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow remote code execution. 3. TECHNICAL...

7.8CVSS8.3AI score0.08595EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/12/21 12:00 a.m.9 views

Wecon Technologies LeviStudioU 缓冲区错误漏洞

Wecon Technologies LeviStudioU is a suite of human-machine interface programming software from Wecon Technologies China. A security vulnerability exists in WECON LeviStudioU that stems from the affected product being susceptible to a heap-based buffer overflow, which could allow an attacker to...

7.8CVSS7.6AI score0.07613EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:00 a.m.16 views

The software for programming Wecon PLC Editor on the Microsoft Windows operating system is vulnerable, allowing a hacker to execute arbitrary code.

The vulnerability of the Wecon PLC Editor software for programming PLCs on the Microsoft Windows operating system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00912EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2021/12/13 4:15 p.m.32 views

CVE-2021-43983

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS0.02743EPSS
SaveExploits0References15
Prion
Prion
added 2021/12/13 4:15 p.m.21 views

Stack overflow

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code...

6.8CVSS7.8AI score0.02743EPSS
SaveExploits0References15Affected Software1
CVE
CVE
added 2021/12/13 3:48 p.m.73 views

CVE-2021-43983

The CVE-2021-43983 entry corresponds to WECON LeviStudioU UMP file parsing stack-based buffer overflow vulnerabilities that permit remote code execution. Connected ZDI advisories describe multiple, tag-specific flaws (BaseSet, XY, HmiSet, Trend, EnterTime, etc.) where parsing certain UMP attribut...

7.8CVSS7.9AI score0.02743EPSS
SaveExploits0References15Affected Software1
Cvelist
Cvelist
added 2021/12/13 3:48 p.m.42 views

CVE-2021-43983 WECON LeviStudioU

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.3AI score0.02743EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2021/12/09 12:00 a.m.31 views

Wecon Technologies LeviStudioU 缓冲区错误漏洞

Wecon Technologies LeviStudioU is a set of human-machine interface programming software from Wecon Technologies China. A security vulnerability exists in Wecon Technologies LeviStudioU, which can be exploited by attackers to execute code...

7.8CVSS7.4AI score0.02743EPSS
SaveExploits0References20
ICS
ICS
added 2021/12/09 12:00 a.m.59 views

WECON LeviStudioU

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: WECON Technology Co., Ltd WECON Equipment: LeviStudioU Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS...

7.8CVSS7.9AI score0.02743EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.8 views

The software for programming Wecon PLC Editor on the Microsoft Windows operating system is vulnerable, allowing a hacker to execute arbitrary code.

The vulnerability of the Wecon PLC Editor software for programming PLCs on the Microsoft Windows operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00973EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/11/22 7:06 p.m.47 views

CVE-2021-42705 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00973EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/22 7:04 p.m.40 views

CVE-2021-42707 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00912EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/18 12:00 a.m.34 views

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS7.7AI score0.00973EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/18 12:00 a.m.30 views

WECON PLC Editor WCP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS7.7AI score0.00912EPSS
SaveExploits0References1
Rows per page
Query Builder