Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-82773 EUVD-2026-77226GHSA-vp8h-949q-v4xc

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exp…

Published Sep 14, 2026 · Updated Sep 14, 2026 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected products

VendorProductAffectedFixed
Contec M2M Gateway Integrated Type CPS-MG341* < 4.1.0 4.1.0
Contec M2M Gateway Configurable type CPS-MGS341* < 4.1.0 4.1.0
Contec M2M Controller Integrated Type CPS-MC341 < 4.1.0 4.1.0
Contec M2M Controller Configurable type CPS-MCS341* < 4.1.0 4.1.0

References