CVE-2019-6539

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
ICS-CERT	WECON LeviStudioU	LeviStudioU Versions 1.8.56 and prior

References

http://www.securityfocus.com/bid/106861Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-036-03Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/106861Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-036-03Patch, Third Party Advisory, US Government Resource

Timeline

Published: Feb 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-65406.5The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLi CVE-2019-65417.8A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code executio CVE-2019-65427.5ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060)_update_05032019-482 allows an unauthenticated us CVE-2019-65439.8AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 20 CVE-2019-65445.6GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform CVE-2019-65457.5AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 20 CVE-2019-65467.8GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, whi CVE-2019-65475.5Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the softw CVE-2019-65489.8GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the CVE-2019-65497.2An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software CVE-2019-65509.8Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper valida CVE-2019-65517.5Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafte