Lucene search

IcscertCVE-2019-6541

HistoryFeb 13, 2019 - 12:29 a.m.

CVE-2019-6541

2019-02-1300:29:00

CWE-119

CWE-787

icscert

web.nvd.nist.gov

cve-2019-6541

memory corruption

wecon levistudiou

arbitrary code execution

vulnerability

nccic

trend micro

zero day initiative

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

48.7%

JSON

A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro’s Zero Day Initiative, reported these vulnerabilities to NCCIC.

Affected configurations

Nvd

Node

we-conlevistudiouRange≤1.8.56

VendorProductVersionCPE
we-conlevistudiou*cpe:2.3:a:we-con:levistudiou:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
we-con	levistudiou	*	cpe:2.3:a:we-con:levistudiou::::::::

CNA Affected

[
  {
    "product": "WECON LeviStudioU",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "LeviStudioU Versions 1.8.56 and prior"
      }
    ]
  }
]

References

www.securityfocus.com/bid/106861

ics-cert.us-cert.gov/advisories/ICSA-19-036-03

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

48.7%

JSON

Related for CVE-2019-6541