Read the docs

Contec Co., Ltd.

Records81All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Contec Co., Ltd. records in CISA KEV
TI-2022-11821 SolarView Compact Command Injection Vulnerability Priority CRITICAL 100KEV 2023-07-13

Components

Products in the NVD configurations · select one to filter the records
Sv-cpt-mc310 Firmware 19 records CRITICAL Conprosys Hmi System 15 records CRITICAL Solarview Compact Firmware 7 records CRITICAL Sv-cpt-mc310f Firmware 6 records MEDIUM Cps-mc341-a1-111 Firmware 3 records MEDIUM Cps-mc341-adsc1-111 Firmware 3 records MEDIUM Cps-mc341-adsc1-931 Firmware 3 records MEDIUM Cps-mc341-adsc2-111 Firmware 3 records MEDIUM

Records

15 records in Conprosys Hmi System · all components

TI-2022-21852 CVE-2022-44456 · GHSA-28g2-wc2r-qwc7

OS command injection in Contec Co., Ltd. CONPROSYS HMI System

Priority CRITICAL 86

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.69877 Published 2022-12-19 No fix listed CWE-78
TI-2023-13585 CVE-2023-29154 · GHSA-9hh8-jr7j-vwg8

SQL injection in Contec Co., Ltd. CONPROSYS HMI System

Priority MEDIUM 62

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.41443 Published 2023-06-01 Fixed in 3.5.3 CWE-89
TI-2023-08595 CVE-2023-22331 · GHSA-fh24-27cp-jr28

Improper privilege management in Contec Co., Ltd. CONPROSYS HMI System

Priority MEDIUM 41

Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01054 Published 2023-01-20 No fix listed CWE-269
TI-2023-08633 CVE-2023-22373 · GHSA-82gc-754r-48p7

Cross-site scripting in Contec Co., Ltd. CONPROSYS HMI System

Priority LOW 36

Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the sensitive information.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01957 Published 2023-01-20 No fix listed CWE-79
TI-2023-08603 CVE-2023-22339 · GHSA-r659-h3gg-4vrp

Improper access control in Contec Co., Ltd. CONPROSYS HMI System

Priority LOW 35

Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01189 Published 2023-01-20 No fix listed CWE-284
TI-2025-24248 CVE-2025-34081 · GHSA-7wpp-wf5g-89wp

CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info

Priority LOW 32

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00677 Published 2025-07-01 Fixed in 3.7.7 CWE-215
TI-2023-08589 CVE-2023-22324 · GHSA-fm73-7fg4-q5w8

SQL injection in Contec Co., Ltd. CONPROSYS HMI System

Priority LOW 32

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01327 Published 2023-01-30 No fix listed CWE-89
TI-2025-24247 CVE-2025-34080 · GHSA-8249-348w-qmmh

CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting

Priority LOW 26

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue aff…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.01255 Published 2025-07-01 Fixed in 3.7.7 CWE-79
TI-2023-08598 CVE-2023-22334 · GHSA-4h9q-9r2g-27j5

Improper authentication in Contec Co., Ltd. CONPROSYS HMI System

Priority LOW 26

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0092 Published 2023-01-20 No fix listed CWE-287
Open these records in search →