Conprosys Hmi System Security Vulnerabilities and Issues — Conprosys Hmi System CVE List

Lucene search

ContecConprosys Hmi System

5 matches found

CVE•added 2023/01/20 3:15 a.m.•78 views

CVE-2023-22339

Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.

7.5CVSS7.5AI score0.0039EPSS

CVE•added 2023/01/20 3:15 a.m.•52 views

CVE-2023-22334

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack.

5.3CVSS5.1AI score0.00995EPSS

CVE•added 2023/01/20 3:15 a.m.•46 views

CVE-2023-22331

Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information.

7.5CVSS7.5AI score0.02654EPSS

CVE•added 2023/01/20 3:15 a.m.•45 views

CVE-2023-22373

Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the sensitive information.

5.4CVSS5.2AI score0.01069EPSS

CVE•added 2023/01/30 7:15 a.m.•37 views

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.

6.5CVSS6.5AI score0.00176EPSS