Cross-site request forgery in Contec Co., Ltd. FXA5000
Priority LOW 23CWE-352Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Tampering
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-352.
Summary
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00195 9th percentileScored 2026-11-07
Fix Fixed FXA5000 (Contec Co., Ltd.): 1.12.00FXA5020 (Contec Co., Ltd.): 1.12.00+31 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Contec Co., Ltd. | FXA5000 | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA5020 | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA5020-[][] | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE5000 | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE5000-[][] | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXS5000-[][] | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXS5021 | before 1.12.00 | 1.12.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE4000 | before 1.14.00 | 1.14.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE4000-WP | before 1.14.00 | 1.14.00 | Patch available | CNA |
| Contec Co., Ltd. | FXS4000 | before 1.14.00 | 1.14.00 | Patch available | CNA |
| Contec Co., Ltd. | FXS4020 | before 1.14.00 | 1.14.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA3000 | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA3000-[][] | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA3020 | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA3020-[][] | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXA3200 | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE3000 | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE3000-[][] | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXE3000-WP | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | FXS300[]-CN | before 1.20.00 | 1.20.00 | Patch available | CNA |
| Contec Co., Ltd. | SGA1000 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | RP-WAH-SR1 | before 1.03 | 1.03 | Patch available | CNA |
| Contec Co., Ltd. | RP-WAH-SR2 | before 1.03 | 1.03 | Patch available | CNA |
| Contec Co., Ltd. | RP-WAH-SR12 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | RP-WAH-SR22 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | ECE1000 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | ECE1020 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | ECS1020 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* | before 1.82 | 1.82 | Patch available | CNA |
| Contec Co., Ltd. | Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 | before 1.02 | 1.02 | Patch available | CNA |
| Contec Co., Ltd. | Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 | before 1.61 | 1.61 | Patch available | CNA |
| Contec Co., Ltd. | PC-HELPER Wireless I/O DIO-0404RY-LWF | before 1.01.00 | 1.01.00 | Patch available | CNA |
| Contec Co., Ltd. | PC-HELPER Wireless I/O DIO-0404RY-LWF-US | before 1.01.00 | 1.01.00 | Patch available | CNA |
- FXA5000 VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXA5020 VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXA5020-[][] VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXE5000 VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXE5000-[][] VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXS5000-[][] VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXS5021 VendorContec Co., Ltd. Affected before 1.12.00 Fixed in 1.12.00 Patch available CNA
- FXE4000 VendorContec Co., Ltd. Affected before 1.14.00 Fixed in 1.14.00 Patch available CNA
- FXE4000-WP VendorContec Co., Ltd. Affected before 1.14.00 Fixed in 1.14.00 Patch available CNA
- FXS4000 VendorContec Co., Ltd. Affected before 1.14.00 Fixed in 1.14.00 Patch available CNA
- FXS4020 VendorContec Co., Ltd. Affected before 1.14.00 Fixed in 1.14.00 Patch available CNA
- FXA3000 VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXA3000-[][] VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXA3020 VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXA3020-[][] VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXA3200 VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXE3000 VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXE3000-[][] VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXE3000-WP VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- FXS300[]-CN VendorContec Co., Ltd. Affected before 1.20.00 Fixed in 1.20.00 Patch available CNA
- SGA1000 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- RP-WAH-SR1 VendorContec Co., Ltd. Affected before 1.03 Fixed in 1.03 Patch available CNA
- RP-WAH-SR2 VendorContec Co., Ltd. Affected before 1.03 Fixed in 1.03 Patch available CNA
- RP-WAH-SR12 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- RP-WAH-SR22 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- ECE1000 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- ECE1020 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- ECS1020 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* VendorContec Co., Ltd. Affected before 1.82 Fixed in 1.82 Patch available CNA
- Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 VendorContec Co., Ltd. Affected before 1.02 Fixed in 1.02 Patch available CNA
- Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 VendorContec Co., Ltd. Affected before 1.61 Fixed in 1.61 Patch available CNA
- PC-HELPER Wireless I/O DIO-0404RY-LWF VendorContec Co., Ltd. Affected before 1.01.00 Fixed in 1.01.00 Patch available CNA
- PC-HELPER Wireless I/O DIO-0404RY-LWF-US VendorContec Co., Ltd. Affected before 1.01.00 Fixed in 1.01.00 Patch available CNA
Remediation
- Fix · CNA FXA5000 (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXA5020 (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXA5020-[][] (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXE5000 (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXE5000-[][] (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXS5000-[][] (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXS5021 (Contec Co., Ltd.) Fixed in 1.12.00
- Fix · CNA FXE4000 (Contec Co., Ltd.) Fixed in 1.14.00
- Fix · CNA FXE4000-WP (Contec Co., Ltd.) Fixed in 1.14.00
- Fix · CNA FXS4000 (Contec Co., Ltd.) Fixed in 1.14.00
- Fix · CNA FXS4020 (Contec Co., Ltd.) Fixed in 1.14.00
- Fix · CNA FXA3000 (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXA3000-[][] (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXA3020 (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXA3020-[][] (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXA3200 (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXE3000 (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXE3000-[][] (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXE3000-WP (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA FXS300[]-CN (Contec Co., Ltd.) Fixed in 1.20.00
- Fix · CNA SGA1000 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA RP-WAH-SR1 (Contec Co., Ltd.) Fixed in 1.03
- Fix · CNA RP-WAH-SR2 (Contec Co., Ltd.) Fixed in 1.03
- Fix · CNA RP-WAH-SR12 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA RP-WAH-SR22 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA ECE1000 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA ECE1020 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA ECS1020 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* (Contec Co., Ltd.) Fixed in 1.82
- Fix · CNA Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 (Contec Co., Ltd.) Fixed in 1.02
- Fix · CNA Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 (Contec Co., Ltd.) Fixed in 1.61
- Fix · CNA PC-HELPER Wireless I/O DIO-0404RY-LWF (Contec Co., Ltd.) Fixed in 1.01.00
- Fix · CNA PC-HELPER Wireless I/O DIO-0404RY-LWF-US (Contec Co., Ltd.) Fixed in 1.01.00
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Contec Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* 1.82
7 records Highest priority Priority LOW 7 LOW
Other records, highest priority first
- TI-2026-57102 Missing authentication in Contec Co., Ltd. Remote I/O Coupler Unit CPSN-MCB271-*Priority LOW 36
- TI-2026-57104 Insufficiently protected credentials in Contec Co., Ltd. Remote I/O Coupler Unit…Priority LOW 35
- TI-2026-57103 Stack-based buffer overflow in Contec Co., Ltd. Remote I/O Coupler Unit CPSN-MCB271-*Priority LOW 25
- Release ·
Contec SGA1000 1.02
4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-57084 OS command injection in Contec Co., Ltd. SGA1000Priority MEDIUM 43
- TI-2026-57086 Path traversal in Contec Co., Ltd. SGA1000Priority MEDIUM 40
- TI-2026-57085 Cross-site scripting in Contec Co., Ltd. SGA1000Priority LOW 22
Show 5 more groups
- Release ·
Contec FXA3000, FXA3000-[][] and 18 more products 1.12.00, 1.14.00, 1.20.00
4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-57080 OS command injection in Contec Co., Ltd. FXA5000Priority MEDIUM 43
- TI-2026-57083 Path traversal in Contec Co., Ltd. FXA5000Priority MEDIUM 40
- TI-2026-57081 Cross-site scripting in Contec Co., Ltd. FXA5000Priority LOW 22
- Release ·
Contec Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041, Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 1.02, 1.61
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-57100 Out-of-bounds write in Contec Co., Ltd. Remote I/O Coupler Unit CPSN-MCB271-*Priority LOW 24
- TI-2026-57099 Cross-site scripting in Contec Co., Ltd. Remote I/O Coupler Unit CPSN-MCB271-*Priority LOW 23
- TI-2026-57101 Plaintext storage of a password issue exists in CONPROSYS nano Series .Priority LOW 18
- Release ·
Contec RP-WAH-SR1, RP-WAH-SR12 and 2 more products 1.02, 1.03
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-57088 Buffer overflow in Contec Co., Ltd. RP-WAH-SR1Priority MEDIUM 41
- TI-2026-57087 Cross-site scripting in Contec Co., Ltd. RP-WAH-SR1Priority LOW 22
- Release ·
Contec ECE1000, ECE1020, ECS1020 1.02
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-57090 Buffer overflow in Contec Co., Ltd. ECE1000Priority MEDIUM 41
- TI-2026-57089 Cross-site scripting in Contec Co., Ltd. ECE1000Priority LOW 22
- Release ·
Contec PC-HELPER Wireless I/O DIO-0404RY-LWF, PC-HELPER Wireless I/O DIO-0404RY-LWF-US 1.01.00
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2026-57108 Cross-site scripting in Contec Co., Ltd. PC-HELPER Wireless I/O DIO-0404RY-LWFPriority LOW 22
Timeline
- 2026-10-02 Threatist record created from CVE-2026-82764
- 2026-10-03 Alias added: GHSA-f9x8-prqh-c2m2
References
Other 6
- https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf
- https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf
- https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_ph_26091000_en.pdf
- https://jvn.jp/en/vu/JVNVU99009004/
- https://jvn.jp/en/vu/JVNVU96551518/
- https://jvn.jp/en/vu/JVNVU90314828/
More Contec Co., Ltd. vulnerabilities
- TI-2022-11821 SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. KEVCVSS 3.1CRITICAL 9.8
- TI-2023-09196 There is a command injection vulnerability in SolarView Compact through 6.00, attackers… CVSS 3.1CRITICAL 9.8
- TI-2022-21852 OS command injection in Contec Co., Ltd. CONPROSYS HMI System CVSS 3.1CRITICAL 9.8
- TI-2023-14072 SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. CVSS 3.1CRITICAL 9.8
- TI-2022-21787 SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file. CVSS 3.1CRITICAL 9.8
- TI-2022-19462 SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-82764 · CVE Program
- CVE-2026-82764 · NVD
- FIRST EPSS
- GHSA-f9x8-prqh-c2m2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences