Wecon develops a suite of industrial automation and human-machine interface (HMI) design tools, including PLC editors, HMI studios, and related engineering software for embedded systems and control applications. The observed vulnerability pattern centers on memory-safety issues, particularly improper restriction of operations within buffer bounds, which reflects the low-level manipulation and firmware generation inherent to embedded design toolchains. Current severity, exploitation, and exposure details are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Wecon over time
Signals from CVEs in this vendor scope (32 CVEs).
32 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-13999CRITICAL A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in wh | Oct 17, 2017 | 9.8 | 32 | NO | NO |
CVE-2018-14818CRITICAL WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior have a stack-based buffer overflow vulnerability which may allow remote co | Oct 8, 2018 | 9.8 | 31 | NO | NO |
CVE-2016-4533HIGH Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file. | Jul 12, 2016 | 7.8 | 31 | NO | NO |
CVE-2021-23138HIGH WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. | Jan 14, 2022 | 7.8 | 29 | NO | NO |
CVE-2021-23157HIGH WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. | Jan 14, 2022 | 7.8 | 28 | NO | NO |
CVE-2020-25181HIGH WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution. | Dec 1, 2020 | 8.8 | 28 | NO | NO |
CVE-2017-6035HIGH A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in den | Apr 27, 2017 | 8.8 | 28 | NO | NO |
CVE-2018-10614HIGH An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project XML files. | Oct 9, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-10610HIGH An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project files. | Oct 9, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14810HIGH WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which | Oct 8, 2018 | 8.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (32 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Wecon.
Media articles that mention a CVE ID that affects a product developed by Wecon — matched by CVE ID, not by vendor name.