Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-22324 EUVD-2023-26487GHSA-fm73-7fg4-q5w8

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an ar…

Published Jan 30, 2023 · Updated Mar 28, 2025 · Assigned by jpcert

Vendor: Contec Product: CONPROSYS HMI System(CHS)

Description

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.

Affected products

VendorProductAffectedFixed
Contec CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier —

References