CVE-2019-6539

Summary

Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.

Affected Software

VendorProductVersion RangeStatus
ICS-CERTWECON LeviStudioULeviStudioU Versions 1.8.56 and prioraffected

Weaknesses

  • CWE-122: Heap-based buffer overflow CWE-122

ADP Enrichment

CVE Program Container

Additional References

References