Wecon
12 CVEs across 6 Wecon products. Browse Wecon vulnerabilities, severities, and proof-of-concept exploits.
Wecon products with known CVEs
Wecon CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-23157 | High | 7.8 | 2022-01-14 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2021-23138 | High | 7.8 | 2022-01-14 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2021-43983 | High | 7.8 | 2021-12-13 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow a… |
CVE-2021-42707 | High | 7.8 | 2021-11-22 | PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary co… |
CVE-2021-42705 | High | 7.8 | 2021-11-22 | PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbit… |
CVE-2018-14814 | Medium | 6.5 | 2019-03-27 | WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result… |
CVE-2018-17889 | Medium | 5.3 | 2018-10-08 | In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that shi… |
CVE-2018-14818 | Critical | 9.8 | 2018-10-08 | WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability whic… |
CVE-2018-14810 | High | 8.8 | 2018-10-08 | WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsa… |
CVE-2018-14792 | Medium | 6.3 | 2018-09-19 | WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files. |
CVE-2016-5781 | High | 7.8 | 2016-07-12 | Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file. |
CVE-2016-4533 | High | 7.8 | 2016-07-12 | Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file. |