CVE-2018-7527

Опубликовано: 26 апр. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 6.8

EPSS Низкий

Описание

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file.

Ссылки

http://www.securityfocus.com/bid/104016
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-116-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/104016
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-116-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:we-con:levistudio_hmi_editor:1.10:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:we-con:levistudiou:*:*:*:*:*:*:*:*

Версия до 1.8.29 (включая)

Конфигурация 3

cpe:2.3:a:we-con:pi_studio_hmi_project_programmer:*:*:*:*:*:*:*:*

Версия до 2017-11-11 (включая)

EPSS

Процентиль: 33%

0.00129

Низкий

5.3 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-4r6c-hgqq-rr35