Vendor
Contec
66 known vulnerabilities.
Contec at a glance
- Last 12 months
- 35
- Critical · all time
- 2
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 35 | 1 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
CONPROSYS HMI System(CHS) 15
SolarView Compact 13
Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* 7
FXA5000 4
FXA5020 4
FXE5000 4
FXS5000-[][] 4
FXS5021 4
FXE4000 4
FXE4000-WP 4
FXS4000 4
FXS4020 4
FXA3000 4
FXA3020 4
FXA3200 4
FXE3000 4
FXE3000-WP 4
FXS300[]-CN 4
Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 4
Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 4
SGA1000 4
CONPROSYS IoT Gateway products 3
M2M Gateway Integrated Type CPS-MG341* 3
M2M Gateway Configurable type CPS-MGS341* 3
M2M Controller Integrated Type CPS-MC341 3
M2M Controller Configurable type CPS-MCS341* 3
ECE1000 3
ECE1020 3
ECS1020 3
SV-CPT-MC310 3
SV-CPT-MC310F 3
Integrated Type CPS-PC341[][]-*-9201 3
Configurable type CPS-PCS341[][]-DS1-1201 3
CAN-2-WF 3
CAN-2-USB 3
RP-WAH-SR1 3
RP-WAH-SR2 3
RP-WAH-SR12 3
RP-WAH-SR22 3
PC-HELPER Wireless I/O DIO-0404RY-LWF 2
Latest advisories
-
Critical max 9.8
Contec CONPROSYS HMI System (CHS)
Successful exploitation of these vulnerabilities could allow a remote attacker to send specially crafted requests and cause a loss of sensitive information.
first Dec 13, 2022
66 results · Feed
-
Medium 5.4
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited…
-
Medium 5.4
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vul…
-
High 8.8
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is expl…
-
High 7.2
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Conver…
-
High 8.1
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is…
-
Medium 5.2
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this v…
-
High 8.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2…
-
Medium 5.4
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404R…
-
High 8.8
An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI…
-
Medium 5.4
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerabil…
-
Critical 9.8
Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, a…
-
Medium 6.1
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may b…
-
Medium 6.3
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulne…
-
Medium 4.3
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a sp…
-
Medium 6.5
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-…
-
Medium 4.2
Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker…
-
Medium 4.3
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and se…
-
Medium 5.4
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary sc…
-
High 8.8
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is upl…
-
High 8.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM…
-
Medium 4.3
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on …
-
High 8.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PA…
-
Medium 6.1
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary scr…
-
Medium 4.3
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Con…
-
High 8.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2…
-
Medium 6.1
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this …
-
High 8.8
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to…
-
Medium 5.4
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary scr…
-
High 8.8
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request…
-
High 8.1
Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may b…
-
Medium 5.4
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary …
-
Medium 5.2
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be ex…
-
High 8.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If …
-
Medium 4.3
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page w…
-
High 8.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX500…
-
Medium 6.9
CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
-
Medium 5.1
CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before…
-
High 8.8
Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC wh…
-
High 8.1
Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account informati…
-
Medium 4.8CVE-2023-28651 EPSS 62%
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can acce…