Description
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contec | CONPROSYS HMI System (CHS) | < 3.7.7 | 3.7.7 |
References
- https://jvn.jp/en/vu/JVNVU92266386/ third-party-advisory
- https://www.vulncheck.com/advisories/conprosys-hmi-system-exposed-php-debug-info third-party-advisory