Comparison Overview

Mesnac Co., Ltd

VS

Lesco Design & Manufacturing Co.

Mesnac Co., Ltd

山东省青岛市市北区郑州路43号软控研发中心, 青岛市, 山东省, 266042, CN
Last Update: 2025-11-25
Between 750 and 799

MESNAC Co., Ltd. was established in 2000. It is an international high-tech enterprise group developed by Qingdao University of Science and Technology. It was listed on the Shenzhen Stock Exchange in 2006. MESNAC's main business and technical advantages are concentrated in the field of rubber machinery, but also involved in the Internet of Things, new materials, energy conservation and environmental protection. The scale of the MESNAC rubber machinery business has long been in the forefront of the world. It can provide rubber industry enterprises with integrated smart manufacturing solutions. In 2016, it won the annual global best supplier award in the tire industry. In 2020, its sales revenue of rubber machinery ranked first in the world. MESNAC has built a number of industry-level comprehensive technology R&D platforms, and successively undertook the construction of the National Rubber and Tire Engineering Technology Research Center, the National Engineering Research Center for Tire Advanced Equipment and Key Materials, and the International Joint Research Center for Digital Rubber and Tire Equipment. MESNAC has built a global R&D system centered on China, the United States, and Slovakia. In recent years, it has developed rapidly in the field of smart manufacturing. Since 2016, it has implemented multiple tire smart manufacturing demonstration factories. In 2017, it launched the China Tire Smart Manufacturing and Standardization Alliance. In 2020, the four international standards of RFID led by MESNAC was released. In the future, MESNAC will integrate global resources, face customers, and continue to innovate, so that the rubber industry will stand on a new level in the world.

NAICS: None
NAICS Definition:
Employees: 586
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Lesco Design & Manufacturing Co.

1120 Fort Pickens Road, LaGrange, Kentucky, 40031, US
Last Update: 2025-11-20
Between 750 and 799

Lesco has been providing the design, fabrication and installation of material handling systems for the Manufacturing Industry for over 47 years. Since our incorporation in 1961, Lesco has earned a well-deserved reputation as a leader in service and quality. Our in-house experience allows us to control multi-million dollar projects on a turn-key basis, providing the customer single-source responsibility. While our core business is material handling systems for automotive assembly, we also provide design, fabrication and intallation of structural steel consisting of office or commercial buildings, process platforms, mezzanines, truss design / reinforcement, connections design, access stairs, ladders and handrail. Whatever your design, fabrication or installation needs are, you can trust Lesco to get the job done right, on-time and within budget.

NAICS: None
NAICS Definition:
Employees: 138
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/mesnac-co-ltd.jpeg
Mesnac Co., Ltd
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/lesco-design-&-manufacturing-co..jpeg
Lesco Design & Manufacturing Co.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Mesnac Co., Ltd
100%
Compliance Rate
0/4 Standards Verified
Lesco Design & Manufacturing Co.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Industrial Automation Industry Average (This Year)

No incidents recorded for Mesnac Co., Ltd in 2025.

Incidents vs Industrial Automation Industry Average (This Year)

No incidents recorded for Lesco Design & Manufacturing Co. in 2025.

Incident History — Mesnac Co., Ltd (X = Date, Y = Severity)

Mesnac Co., Ltd cyber incidents detection timeline including parent company and subsidiaries

Incident History — Lesco Design & Manufacturing Co. (X = Date, Y = Severity)

Lesco Design & Manufacturing Co. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/mesnac-co-ltd.jpeg
Mesnac Co., Ltd
Incidents

No Incident

https://images.rankiteo.com/companyimages/lesco-design-&-manufacturing-co..jpeg
Lesco Design & Manufacturing Co.
Incidents

No Incident

FAQ

Mesnac Co., Ltd company demonstrates a stronger AI Cybersecurity Score compared to Lesco Design & Manufacturing Co. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Lesco Design & Manufacturing Co. company has disclosed a higher number of cyber incidents compared to Mesnac Co., Ltd company.

In the current year, Lesco Design & Manufacturing Co. company and Mesnac Co., Ltd company have not reported any cyber incidents.

Neither Lesco Design & Manufacturing Co. company nor Mesnac Co., Ltd company has reported experiencing a ransomware attack publicly.

Neither Lesco Design & Manufacturing Co. company nor Mesnac Co., Ltd company has reported experiencing a data breach publicly.

Neither Lesco Design & Manufacturing Co. company nor Mesnac Co., Ltd company has reported experiencing targeted cyberattacks publicly.

Neither Mesnac Co., Ltd company nor Lesco Design & Manufacturing Co. company has reported experiencing or disclosing vulnerabilities publicly.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Mesnac Co., Ltd company nor Lesco Design & Manufacturing Co. company has publicly disclosed detailed information about the number of their subsidiaries.

Mesnac Co., Ltd company employs more people globally than Lesco Design & Manufacturing Co. company, reflecting its scale as a Industrial Automation.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds SOC 2 Type 1 certification.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds SOC 2 Type 2 certification.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds ISO 27001 certification.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds PCI DSS certification.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds HIPAA certification.

Neither Mesnac Co., Ltd nor Lesco Design & Manufacturing Co. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H