Vulnerabilities (CVE)

Filtered by vendor We-con Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-7527 1 We-con 3 Levistudio Hmi Editor, Levistudiou, Pi Studio Hmi Project Programmer 2019-10-09 6.8 MEDIUM 5.3 MEDIUM
A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file.
CVE-2018-17889 1 We-con 2 Pi Studio, Pi Studio Hmi 2019-10-09 4.3 MEDIUM 5.3 MEDIUM
In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure.
CVE-2018-14792 1 We-con 1 Plc Editor 2019-10-09 6.8 MEDIUM 6.3 MEDIUM
WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.
CVE-2018-14814 1 We-con 2 Pi Studio, Pi Studio Hmi 2019-10-09 4.3 MEDIUM 6.5 MEDIUM
WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.