Read the docs

WECON Technology Co., Ltd.

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

WECON Technology Co., Ltd. records in CISA KEV

No WECON Technology Co., Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Plc Editor · all components

Priority MEDIUM 42

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02058 Published 2020-12-01 No fix listed CWE-122
Priority MEDIUM 42

WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01825 Published 2020-12-01 No fix listed CWE-121
Priority LOW 39

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02791 Published 2019-12-23 No fix listed CWE-121
TI-2021-18920 CVE-2021-42707 · GHSA-83cj-78f4-89p2

Out-of-bounds write in WECON PLC Editor

Priority LOW 36

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-11-22 No fix listed CWE-787
Priority LOW 36

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01036 Published 2021-11-22 No fix listed CWE-121
Priority LOW 31

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.

CVSS 3.0MEDIUM 6.3 Network No auth User interaction EPSS 0.01347 Published 2018-09-19 No fix listed CWE-121
Open these records in search →