We Con maintains a specialized portfolio of industrial automation and control engineering tools, including products such as Levi Studio, PLC Editor, and PI Studio HMI variants that serve the programmable logic controller and human-machine interface development space. The vendor's vulnerability profile is distributed across this narrowly focused set of engineering applications rather than a broad consumer or enterprise platform, which constrains the direct attack surface but places these tools in environments where availability and integrity matter significantly. While the disclosure volume across these products is modest, the structural context of PLC programming and HMI design means that vulnerabilities in these tools can affect the integrity of industrial control logic and operator interfaces downstream. Defenders working in industrial automation environments should track this vendor's advisories in the context of their specific engineering workflows and supply-chain dependencies rather than as a broad enterprise concern; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by We Con over time
Signals from CVEs in this vendor scope (32 CVEs).
32 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-13999CRITICAL A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in wh | Oct 17, 2017 | 9.8 | 32 | NO | NO |
CVE-2018-14818CRITICAL WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote co | Oct 8, 2018 | 9.8 | 31 | NO | NO |
CVE-2016-4533HIGH Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file. | Jul 12, 2016 | 7.8 | 31 | NO | NO |
CVE-2021-23138HIGH WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. | Jan 14, 2022 | 7.8 | 29 | NO | NO |
CVE-2021-23157HIGH WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. | Jan 14, 2022 | 7.8 | 28 | NO | NO |
CVE-2020-25181HIGH WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution. | Dec 1, 2020 | 8.8 | 28 | NO | NO |
CVE-2017-6035HIGH A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in den | Apr 27, 2017 | 8.8 | 28 | NO | NO |
CVE-2018-10614HIGH An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project XML files. | Oct 9, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-10610HIGH An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project files. | Oct 9, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14810HIGH WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which | Oct 8, 2018 | 8.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (32 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by We Con.
Media articles that mention a CVE ID that affects a product developed by We Con — matched by CVE ID, not by vendor name.