CVE-2021-23138

Sažetak

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.

Reference

https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-03
https://www.zerodayinitiative.com/advisories/ZDI-22-129/
https://www.zerodayinitiative.com/advisories/ZDI-22-141/
https://www.zerodayinitiative.com/advisories/ZDI-22-131/
https://www.zerodayinitiative.com/advisories/ZDI-22-142/
https://www.zerodayinitiative.com/advisories/ZDI-22-140/
https://www.zerodayinitiative.com/advisories/ZDI-22-134/
https://www.zerodayinitiative.com/advisories/ZDI-22-135/
https://www.zerodayinitiative.com/advisories/ZDI-22-133/
https://www.zerodayinitiative.com/advisories/ZDI-22-138/
https://www.zerodayinitiative.com/advisories/ZDI-22-139/
https://www.zerodayinitiative.com/advisories/ZDI-22-136/
https://www.zerodayinitiative.com/advisories/ZDI-22-137/

CVSS

Base:	6.8
Impact:	6.4
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

09-02-2022 - 20:35

Objavljeno

14-01-2022 - 20:15