CVE-2021-23157

Name of the Vulnerable Software and Affected Versions WECON LeviStudioU versions 2019-09-21 and prior

Description The issue is caused by a heap-based buffer overflow in the dynamic memory of WECON LeviStudioU, which may allow a remote attacker to execute arbitrary code. This can be achieved through the exploitation of the heap-based buffer overflow vulnerability, potentially allowing for remote code execution.

Recommendations For WECON LeviStudioU versions 2019-09-21 and prior, update to a version later than 2019-09-21 to resolve the issue. As a temporary workaround, consider restricting access to the UMP file parsing functionality until a patch is available. Avoid using the ScreenInfo Tag ScrnName and ScrnFile in the UMP file parsing screen until the issue is resolved.