本頁列出影響 we-con plc_editor 的已公開 CVE 漏洞（透過 NVD CPE 關聯）。每列包含嚴重程度評分、摘要與發布日期，便於識別與分析安全議題。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2021-42707 | PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. | [email protected] | 7.8 | 0.91% | 2021-11-22 | 2026-06-17 |
| CVE-2021-42705 | PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code. | [email protected] | 7.8 | 0.97% | 2021-11-22 | 2026-06-17 |
| CVE-2020-25181 | WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution. | [email protected] | 8.8 | 1.97% | 2020-12-01 | 2026-06-16 |
| CVE-2020-25177 | WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution. | [email protected] | 8.8 | 1.75% | 2020-12-01 | 2026-06-16 |
| CVE-2019-18236 | Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application. | [email protected] | 7.8 | 2.79% | 2019-12-23 | 2026-06-16 |
| CVE-2018-14792 | WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files. | [email protected] | 6.3 | 1.35% | 2018-09-19 | 2026-06-16 |