CVE-2021-23138

HIGH 7.8CVE-2021-23138 · Published 14/01/2022 · updated 17/06/2026

In short

CVE-2021-23138 is a HIGH (CVSS 7.8) vulnerability affecting levistudiou (we-con).
Chance of exploitation in the next 30 days (EPSS): 8.6%, higher than 95.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
levistudiou we-con	`≤ 2019-09-21`	No fix yet

Description

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.

References

cisa.gov/uscert/ics/advisories/icsa-21-355-03 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-129 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-131 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-133 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-134 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-135 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-136 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-137 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-138 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-139 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-22-140 · Third Party Advisory

More vulnerabilities in levistudiou

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

levistudiou

we-con

≤ 2019-09-21

No fix yet

More vulnerabilities in levistudiou

See all →