WECON Technology Co., Ltd. — Vulnerabilities & Security Advisories 3

WECON Technology Co., Ltd. specializes in industrial automation solutions, primarily focusing on programmable logic controllers (PLCs) and human-machine interfaces (HMIs) for manufacturing environments. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure default configurations. While no major public security incidents have been widely documented, the three CVEs associated with the company highlight persistent weaknesses in their web interfaces and communication protocols, potentially exposing industrial control systems to unauthorized access and manipulation.