Read the docs

Contec Co., Ltd.

Records81All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Contec Co., Ltd. records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Cps-mc341-a1-111 Firmware · all components

Priority MEDIUM 44

OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privilege.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01929 Published 2023-04-11 No fix listed CWE-78
Priority LOW 34

Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the informat…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00523 Published 2023-04-11 No fix listed CWE-326
Priority LOW 21

Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00694 Published 2023-04-11 No fix listed CWE-284
Open these records in search →