CVE-2017-16739

Опубликовано: 12 янв. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution.

Ссылки

http://www.securityfocus.com/bid/102493
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-011-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/102493
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-011-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:we-con:levistudio_hmi_editor_firmware:*:*:*:*:*:*:*:*

Версия до 1.8.29 (включая)

cpe:2.3:h:we-con:levistudio_hmi_editor:-:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01016

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-hppp-vv5m-2rh7