Vulnerability Description
Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| We-Con | Levistudiou | <= 1.8.56 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106861Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-036-03PatchThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/106861Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-036-03PatchThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2019-6539?
CVE-2019-6539 is a vulnerability with a CVSS score of 7.8 (HIGH). Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Sa...
How severe is CVE-2019-6539?
CVE-2019-6539 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-6539?
Check the references section above for vendor advisories and patch information. Affected products include: We-Con Levistudiou.