Vendor
Contec
66 known vulnerabilities.
Products
CONPROSYS HMI System(CHS) 15
SolarView Compact 13
Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* 7
FXA5000 4
FXA5020 4
FXE5000 4
FXS5000-[][] 4
FXS5021 4
FXE4000 4
FXE4000-WP 4
FXS4000 4
FXS4020 4
FXA3000 4
FXA3020 4
FXA3200 4
FXE3000 4
FXE3000-WP 4
FXS300[]-CN 4
Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 4
Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 4
SGA1000 4
CONPROSYS IoT Gateway products 3
M2M Gateway Integrated Type CPS-MG341* 3
M2M Gateway Configurable type CPS-MGS341* 3
M2M Controller Integrated Type CPS-MC341 3
M2M Controller Configurable type CPS-MCS341* 3
ECE1000 3
ECE1020 3
ECS1020 3
SV-CPT-MC310 3
SV-CPT-MC310F 3
Integrated Type CPS-PC341[][]-*-9201 3
Configurable type CPS-PCS341[][]-DS1-1201 3
CAN-2-WF 3
CAN-2-USB 3
RP-WAH-SR1 3
RP-WAH-SR2 3
RP-WAH-SR12 3
RP-WAH-SR22 3
PC-HELPER Wireless I/O DIO-0404RY-LWF 2
29 results · Clear filters · Feed
-
Medium 5.4
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited…
-
Medium 5.4
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vul…
-
Medium 5.2
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this v…
-
Medium 5.4
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404R…
-
Medium 5.4
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerabil…
-
Medium 6.1
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may b…
-
Medium 6.3
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulne…
-
Medium 4.3
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a sp…
-
Medium 6.5
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-…
-
Medium 4.2
Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker…
-
Medium 4.3
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and se…
-
Medium 5.4
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary sc…
-
Medium 4.3
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on …
-
Medium 6.1
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary scr…
-
Medium 4.3
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Con…
-
Medium 6.1
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this …
-
Medium 5.4
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary scr…
-
Medium 5.4
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary …
-
Medium 5.2
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be ex…
-
Medium 4.3
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page w…
-
Medium 6.9
CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
-
Medium 5.1
CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before…
-
Medium 4.8CVE-2023-28651 EPSS 62%
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can acce…
-
Medium 4.9
Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can …
-
Medium 4.3
Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions p…
-
Medium 4.3
Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypas…
-
Medium 6.5
SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attac…
-
Medium 5.4
Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated at…
-
Medium 5.3
Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and e…