Skip to content
OpenAdvisories
High · 7.2 CVE-2023-29154 EUVD-2023-32756GHSA-9hh8-jr7j-vwg8

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product wi…

Published Jun 1, 2023 · Updated Jan 9, 2025 · Assigned by jpcert

Vendor: Contec Product: CONPROSYS HMI System(CHS)

Description

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.

Affected products

VendorProductAffectedFixed
Contec CONPROSYS HMI System (CHS) versions prior to 3.5.3 —

References