Conprosys Hmi System
Approved changes feed: RSS · Atom
cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Contec (12d4c7df-5901-5f24-95ff-bbf411520843) |
|---|---|
| Product | Conprosys Hmi System (b07f9952-aa6c-53fe-808c-4d22fd428361) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34081 |
vulnerable | 2026-06-08 07:19:02.158008 |
CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
Published: 2025-07-01T17:56:56.073Z
Updated: 2025-11-21T19:24:57.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34080 |
vulnerable | 2026-06-08 07:19:02.157558 |
CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
Published: 2025-07-01T17:51:53.979Z
Updated: 2025-11-21T19:25:27.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2758 |
vulnerable | 2026-06-08 06:02:42.958459 |
Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service
LOW (3.7)
A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.
Published: 2023-05-31T14:09:49.809Z
Updated: 2025-01-09T20:26:25.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29154 |
vulnerable | 2026-06-08 06:02:38.798076 |
Details available
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.
Published: 2023-06-01T00:00:00.000Z
Updated: 2025-01-09T19:24:43.251Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28824 |
vulnerable | 2026-06-08 06:02:36.129001 |
Details available
Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database.
Published: 2023-06-01T00:00:00.000Z
Updated: 2025-01-09T19:29:17.173Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28713 |
vulnerable | 2026-06-08 06:02:35.198435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28657 |
vulnerable | 2026-06-08 06:01:14.641001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28651 |
vulnerable | 2026-06-08 06:01:14.631333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28399 |
vulnerable | 2026-06-08 06:01:10.660366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22373 |
vulnerable | 2026-06-08 05:54:24.949788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22339 |
vulnerable | 2026-06-08 05:54:24.685776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22334 |
vulnerable | 2026-06-08 05:54:24.678205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22331 |
vulnerable | 2026-06-08 05:54:24.673634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22324 |
vulnerable | 2026-06-08 05:54:23.718701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44456 |
vulnerable | 2026-06-08 05:49:35.560496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.