Read the docs

WECON

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

WECON records in CISA KEV

No WECON vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Levistudio 1 record MEDIUM Levistudiou 1 record MEDIUM

Records

12 records

TI-2021-05929 CVE-2021-23138 · GHSA-rvhx-r576-jx25

Stack-based buffer overflow in WECON LeviStudioU

Priority MEDIUM 47

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.08595 Published 2022-01-14 No fix listed CWE-121
TI-2021-05938 CVE-2021-23157 · GHSA-mv25-j7gj-c8p5

Heap-based buffer overflow in WECON LeviStudioU

Priority MEDIUM 46

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07613 Published 2022-01-14 No fix listed CWE-122
TI-2021-19739 CVE-2021-43983 · GHSA-6f9g-vc76-v447

Stack-based buffer overflow in WECON LeviStudioU

Priority LOW 39

WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02918 Published 2021-12-13 No fix listed CWE-121
TI-2021-18920 CVE-2021-42707 · GHSA-83cj-78f4-89p2

Out-of-bounds write in WECON PLC Editor

Priority LOW 36

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-11-22 No fix listed CWE-787
TI-2021-18918 CVE-2021-42705 · GHSA-2rh6-6g57-x8rx

Stack-based buffer overflow in WECON PLC Editor

Priority LOW 36

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01036 Published 2021-11-22 No fix listed CWE-121
TI-2018-10644 CVE-2018-14814 · GHSA-95vv-pcp5-5fh4

Out-of-bounds read in WECON Technology PI Studio HMI

Priority LOW 32

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01468 Published 2019-03-27 No fix listed CWE-125
TI-2018-10622 CVE-2018-14792 · GHSA-v2gh-3wpg-5wcv

Stack-based buffer overflow in WECON PLC Editor

Priority LOW 31

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.

CVSS 3.0MEDIUM 6.3 Network No auth User interaction EPSS 0.01347 Published 2018-09-19 No fix listed CWE-121
Open these records in search →