CVE-2017-16737: Buffer Overflow
First published: Fri Jan 12 2018(Updated: )
An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file may be able to cause a heap-based buffer overflow vulnerability when opened by a user.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| We-con Levistudio Hmi Editor Firmware | <=1.8.29 | |
| We-con Levistudio Hmi Editor |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-16737?
CVE-2017-16737 is rated as a critical vulnerability due to its potential for causing heap-based buffer overflow, which can lead to remote code execution.
How do I fix CVE-2017-16737?
To fix CVE-2017-16737, users should upgrade to the latest version of WECON Technology LEVI Studio HMI Editor beyond version 1.8.29.
Who is affected by CVE-2017-16737?
CVE-2017-16737 affects users of WECON Technology LEVI Studio HMI Editor versions 1.8.29 and earlier.
What can happen if CVE-2017-16737 is exploited?
If exploited, CVE-2017-16737 could allow an attacker to execute arbitrary code on the affected system, potentially leading to significant security breaches.
Is there a workaround for CVE-2017-16737?
Currently, there are no known workarounds for CVE-2017-16737, so immediate upgrading is the recommended mitigation measure.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/we-con
- canonical/we-con levistudio hmi editor firmware
- version/we-con levistudio hmi editor firmware/1.8.29
- canonical/we-con levistudio hmi editor