Advisories · Technology

Contec Co.,Ltd. CONPROSYS HMI System (CHS).

Every CVE that names Contec Co.,Ltd. CONPROSYS HMI System (CHS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-34081 CVE record

CVSS 6.9 Medium

CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
- Contec Co.,Ltd. CONPROSYS HMI System (CHS)
- CWE-215
Not analysed yet 1 Jul 2025
CVE-2025-34080 CVE record

CVSS 5.1 Medium

CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting
- Contec Co.,Ltd. CONPROSYS HMI System (CHS)
- Cross-site scripting (XSS)
Not analysed yet 1 Jul 2025
CVE-2023-29154 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- SQL injection
Not analysed yet 1 Jun 2023
CVE-2023-28824 CVE record

CVSS 4.9 Medium

Server-side request forgery in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Server-side request forgery (SSRF)
Not analysed yet 1 Jun 2023
CVE-2023-28713 CVE record

CVSS 8.1 High

Cleartext storage of sensitive information in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Information disclosure
Not analysed yet 1 Jun 2023
CVE-2023-28657 CVE record

CVSS 8.8 High

Missing authorization in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Broken access control
Not analysed yet 1 Jun 2023
CVE-2023-28651 CVE record

CVSS 4.8 Medium

Cross-site scripting in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Cross-site scripting (XSS)
Not analysed yet 1 Jun 2023
CVE-2023-28399 CVE record

CVSS 7.8 High

Incorrect permission assignment in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Broken access control
Not analysed yet 1 Jun 2023
CVE-2023-22324 CVE record

CVSS 6.5 Medium

SQL injection in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- SQL injection
Not analysed yet 30 Jan 2023
CVE-2023-22373 CVE record

CVSS 5.4 Medium

Cross-site scripting in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2023
CVE-2023-22339 CVE record

CVSS 7.5 High

Improper access control in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Broken access control
Not analysed yet 20 Jan 2023
CVE-2023-22334 CVE record

CVSS 5.3 Medium

Improper authentication in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Authentication bypass
Not analysed yet 20 Jan 2023
CVE-2023-22331 CVE record

CVSS 7.5 High

Improper privilege management in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Privilege escalation
Not analysed yet 20 Jan 2023
CVE-2022-44456 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Contec Co., Ltd. CONPROSYS HMI System (CHS)
- Command injection
Not analysed yet 19 Dec 2022