Skip to content
OpenAdvisories
High · 8.8 CVE-2023-28657 EUVD-2023-32318GHSA-mvj7-x43c-gpcj

Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected pro…

Published Jun 1, 2023 · Updated Jan 9, 2025 · Assigned by jpcert

Description

Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user.

Affected products

VendorProductAffectedFixed
Contec CONPROSYS HMI System (CHS) versions prior to 3.5.3 —

References