Skip to content
OpenAdvisories

Product · Contec

CONPROSYS HMI System(CHS)

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34081

    CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info

    The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

    Contec CONPROSYS HMI System(CHS)
  • Medium 5.1
    CVE-2025-34080

    CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting

    The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before…

    Contec CONPROSYS HMI System(CHS)
  • Medium 4.8
    CVE-2023-28651 EPSS 62%

    Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can acce…

    Contec CONPROSYS HMI System(CHS)
  • Medium 4.9
    CVE-2023-28824

    Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can …

    Contec CONPROSYS HMI System(CHS)
  • Medium 6.5
    CVE-2023-22324

    SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attac…

    Contec CONPROSYS HMI System(CHS)
  • Medium 5.4
    CVE-2023-22373

    Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated at…

    Contec CONPROSYS HMI System(CHS)
  • Medium 5.3
    CVE-2023-22334

    Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and e…

    Contec CONPROSYS HMI System(CHS)