Description
The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.
Published: 2026-07-07
Score: 8.4 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

This vulnerability is a stack-based buffer overflow (CWE-121) that corrupts the program’s call stack, permitting an attacker to execute arbitrary code on the affected system. The impact is the loss of confidentiality, integrity, and availability as the attacker gains full control of the application.

Affected Systems

Affected software is Labcenter Proteus. Versions 8.x and higher are vulnerable. The vendor recommends upgrading to the latest release, 9.2 SPO, which contains the necessary fix.

Risk and Exploitability

The CVSS score of 8.4 indicates a high severity. available, and the vulnerability is not listed in the CISA KEV catalog. The exploit path is not fully disclosed, but a stack overflow typically requires either local access or an opportunity to deliver a crafted input, possibly through the software’s simulation interfaces.

Generated by OpenCVE AI on July 8, 2026 at 04:08 UTC.

Remediation

Vendor Solution

Labcenter recommends ensuring you are using the latest version (9.2 SPO) of the software. Version can be found by looking at the bottom left of the Proteus home page (Version 8 or higher) or by selecting the About ISIS or About ARES option from the Help menu. Update notifications appear in the new and information section of the home page where you can activate the download and installation directly. If you have questions or need help please contact Labcenter or your local distributor.

OpenCVE Recommended Actions

  • Upgrade Labcenter Proteus to version 9.2 SPO or later as the vendor’s official solution.
  • If an immediate upgrade is not possible, isolate the affected machines from untrusted networks and disable any interfaces that allow external input until a patch is applied.
  • Stay informed of any new advisories from Labcenter or security communities and apply interim fixes when they become available.

Generated by OpenCVE AI on July 8, 2026 at 04:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 07 Jul 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Labcenter
Labcenter proteus
Vendors & Products Labcenter
Labcenter proteus

Tue, 07 Jul 2026 22:15:00 +0000

Type Values Removed Values Added
Description The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.
Title Stack-Based Buffer Overflow in Labcenter Proteus
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Labcenter Proteus
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-07-07T21:53:38.630Z

Reserved: 2026-06-03T15:40:50.740Z

Link: CVE-2026-49033

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-08T04:15:04Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow