CVE-2021-43983

Sažetak

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code.

Reference

https://www.cisa.gov/uscert/ics/advisories/icsa-21-343-02
https://www.zerodayinitiative.com/advisories/ZDI-22-043/
https://www.zerodayinitiative.com/advisories/ZDI-22-042/
https://www.zerodayinitiative.com/advisories/ZDI-22-041/
https://www.zerodayinitiative.com/advisories/ZDI-22-040/
https://www.zerodayinitiative.com/advisories/ZDI-22-036/
https://www.zerodayinitiative.com/advisories/ZDI-22-047/
https://www.zerodayinitiative.com/advisories/ZDI-22-046/
https://www.zerodayinitiative.com/advisories/ZDI-22-035/
https://www.zerodayinitiative.com/advisories/ZDI-22-034/
https://www.zerodayinitiative.com/advisories/ZDI-22-045/
https://www.zerodayinitiative.com/advisories/ZDI-22-044/
https://www.zerodayinitiative.com/advisories/ZDI-22-039/
https://www.zerodayinitiative.com/advisories/ZDI-22-038/
https://www.zerodayinitiative.com/advisories/ZDI-22-037/

CVSS

Base:	6.8
Impact:	6.4
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

28-02-2022 - 15:20

Objavljeno

13-12-2021 - 16:15