Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Contec Co.,Ltd. CONPROSYS HMI System (CHS) 3.7.7 Clear all filters
TI-2025-24248 CVE-2025-34081 · GHSA-7wpp-wf5g-89wp

CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info

Priority LOW 32

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00677 Published 2025-07-01 Fixed in 3.7.7 CWE-215
TI-2025-24247 CVE-2025-34080 · GHSA-8249-348w-qmmh

CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting

Priority LOW 26

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue aff…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.01255 Published 2025-07-01 Fixed in 3.7.7 CWE-79