ZEXELON CO., LTD. — Vulnerabilities & Security Advisories 3

ZEXELON CO., LTD. develops industrial control systems and SCADA solutions for critical infrastructure. Their products have historically been affected by remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure default configurations. While no major public security incidents have been documented, the three CVEs associated with their products highlight persistent issues in access control and secure coding practices. Their systems' integration with operational technology environments increases potential impact, making vulnerability management particularly crucial for their customers in energy and manufacturing sectors.