Wecon

12 CVEs across 6 Wecon products. Browse Wecon vulnerabilities, severities, and proof-of-concept exploits.

Wecon products with known CVEs

Product	CVEs
Levistudiou	4
Pi Studio	3
Pi Studio Hmi	3
Plc Editor	3
Levistudio	1
Wecon Technology Pi Studio Hmi	1

Wecon CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2021-23157`	High	`7.8`	2022-01-14	WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.
`CVE-2021-23138`	High	`7.8`	2022-01-14	WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.
`CVE-2021-43983`	High	`7.8`	2021-12-13	WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow a…
`CVE-2021-42707`	High	`7.8`	2021-11-22	PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary co…
`CVE-2021-42705`	High	`7.8`	2021-11-22	PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbit…
`CVE-2018-14814`	Medium	`6.5`	2019-03-27	WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result…
`CVE-2018-17889`	Medium	`5.3`	2018-10-08	In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that shi…
`CVE-2018-14818`	Critical	`9.8`	2018-10-08	WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability whic…
`CVE-2018-14810`	High	`8.8`	2018-10-08	WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsa…
`CVE-2018-14792`	Medium	`6.3`	2018-09-19	WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.
`CVE-2016-5781`	High	`7.8`	2016-07-12	Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.
`CVE-2016-4533`	High	`7.8`	2016-07-12	Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.