PT-2021-7367 · Wecon · Wecon Levistudiou

Natnael Samson + 1 · Published 2021-08-18 · Updated 2022-02-09 · CVE-2021-23138

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WECON LeviStudioU versions 2019-09-21 and prior

Description The issue is caused by a stack-based buffer overflow. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For WECON LeviStudioU versions 2019-09-21 and prior, update to a version later than 2019-09-21 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2022-05811

CVE-2021-23138

ZDI-22-129

ZDI-22-131

ZDI-22-133

ZDI-22-134

ZDI-22-135

ZDI-22-136

ZDI-22-137

ZDI-22-138

ZDI-22-139

ZDI-22-140

ZDI-22-141

ZDI-22-142

Affected Products

Wecon Levistudiou

References · 19

• https://zerodayinitiative.com/advisories/ZDI-22-141 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-136 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-138 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-137 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-129 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-140 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-139 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-131 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-142 · Security Note
• https://osv.dev/vulnerability/CVE-2021-23138 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-135 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-133 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-23138 · Security Note
• https://bdu.fstec.ru/vul/2022-05811 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-134 · Security Note