WECON — Vulnerabilities & Security Advisories 10

WECON specializes in industrial automation and control systems, providing PLCs and HMIs for manufacturing environments. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from inadequate input validation and weak authentication mechanisms. Security researchers have identified multiple critical vulnerabilities in their web interfaces and communication protocols, with 10 CVEs documented to date. Notable incidents include unauthenticated RCE flaws in their HMI devices that could allow attackers to take control of industrial processes. Their products typically lack secure-by-design principles, with many vulnerabilities persisting across multiple firmware versions, posing significant risks to operational technology environments.