Lucene search
HistoryDec 19, 2022 - 3:15 a.m.
CVE-2022-44456
conprosys
hmi system
vulnerability
remote
os command execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.008
Percentile
81.5%
CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.
Affected configurations
Node
contecconprosys_hmi_systemRange≤3.4.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| contec | conprosys_hmi_system | * | cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2022-44456
2022-12-19 00:00:00
nessus
nessus
Contec CONPROSYS HMI System (CHS) OS Command Injection (CVE-2022-44456)
2023-03-09 00:00:00
cve
cve
CVE-2022-44456
2022-12-19 03:15:10
prion
prion
Design/Logic Flaw
2022-12-19 03:15:00
ics
ics
Contec CONPROSYS HMI System (CHS) Update A
2023-01-19 12:00:00
thn
thn
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.008
Percentile
81.5%
Related for NVD:CVE-2022-44456