Vulnerability index

Browse CVEs

40 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Conprosys Hmi System HIGH 7.5
CVE-2025-34081

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for…

Fix: 3.7.7+
Fix from $1,950 2025-07-01
Conprosys Hmi System MEDIUM 6.1
CVE-2025-34080

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow refl…

Fix: 3.7.7+
Fix from $1,600 2025-07-01
Solarview Compact Firmware CRITICAL 9.8
CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.

Fix: after 6.0
Fix from $2,300 2023-10-27
Solarview Compact Firmware HIGH 7.5
CVE-2023-40924

SolarView Compact < 6.00 is vulnerable to Directory Traversal.

Fix: 6.0+
Fix from $1,950 2023-09-08
Conprosys Hmi System HIGH 8.8
CVE-2023-28657

Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is in…

Fix: 3.5.3+
Fix from $1,950 2023-06-01
Conprosys Hmi System HIGH 8.1
CVE-2023-28713

Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in…

Fix: 3.5.3+
Fix from $1,950 2023-06-01
Conprosys Hmi System HIGH 7.8
CVE-2023-28399

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not …

Fix: 3.5.3+
Fix from $1,950 2023-06-01
Conprosys Hmi System HIGH 7.2
CVE-2023-29154EPSS 41%

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an admi…

Fix: 3.5.3+
Fix from $1,950 2023-06-01
Conprosys Hmi System MEDIUM 5.3
CVE-2023-2758

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain confi…

Fix: 3.5.3+
Fix from $1,600 2023-05-31
Sv Cpt Mc310f Firmware HIGH 8.8
CVE-2023-27514

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior…

Fix: 8.10+
Fix from $1,950 2023-05-23
Sv Cpt Mc310f Firmware HIGH 8.8
CVE-2023-27518

Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions p…

Fix: 8.10+
Fix from $1,950 2023-05-23
Sv Cpt Mc310f Firmware HIGH 8.8
CVE-2023-27521

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions p…

Fix: 8.10+
Fix from $1,950 2023-05-23
Sv Cpt Mc310f Firmware HIGH 7.2
CVE-2023-27512

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, whic…

Fix: 8.10+
Fix from $1,950 2023-05-23
Solarview Compact Firmware CRITICAL 9.1
CVE-2023-29919EPSS 60%

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restrict…

Fix: after 6.0
Fix from $2,300 2023-05-23
Cps Mg341 Adsc1 111 Firmware HIGH 8.8
CVE-2023-27917

OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page t…

Fix: after 3.7.10
Fix from $1,950 2023-04-11
Cps Mg341 Adsc1 111 Firmware HIGH 7.2
CVE-2023-27389

Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privileg…

Fix: after 3.7.10
Fix from $1,950 2023-04-11
Solarview Compact Firmware CRITICAL 9.8
CVE-2023-23333EPSS 99%

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions throu…

Fix: after 6.00
Fix from $2,300 2023-02-06
Conprosys Hmi System MEDIUM 6.5
CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQ…

Fix: 3.5.1+
Fix from $1,600 2023-01-30
Conprosys Hmi System HIGH 7.5
CVE-2023-22339

Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access r…

Fix: after 3.4.5
Fix from $1,950 2023-01-20
Conprosys Hmi System MEDIUM 5.4
CVE-2023-22373

Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary …

Fix: after 3.4.5
Fix from $1,600 2023-01-20
Conprosys Hmi System MEDIUM 5.3
CVE-2023-22334

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authent…

Fix: after 3.4.5
Fix from $1,600 2023-01-20
Conprosys Hmi System HIGH 7.5
CVE-2023-22331

Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user c…

Fix: after 3.4.5
Fix from $1,950 2023-01-20
Conprosys Hmi System CRITICAL 9.8
CVE-2022-44456EPSS 70%

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the …

Fix: after 3.4.4
Fix from $2,300 2022-12-19
Solarview Compact Firmware CRITICAL 9.8
CVE-2022-44354

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

No fix yet
Fix from $2,300 2022-11-29
Solarview Compact Firmware MEDIUM 6.1
CVE-2022-44355

SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.

No fix yet
Fix from $1,600 2022-11-29
Solarview Compact Firmware CRITICAL 9.8
CVE-2022-40881EPSS 29%

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

No fix yet
Fix from $2,300 2022-11-17
Fxa3000 Firmware HIGH 8.8
CVE-2022-36159

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the pass…

Fix: 1.39.00+
Fix from $1,950 2022-09-26
Fxa3000 Firmware HIGH 8.0
CVE-2022-36158

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to exe…

Fix: 1.39.00+
Fix from $1,950 2022-09-26
Sv Cpt Mc310f Firmware HIGH 8.8
CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficien…

Fix: 7.24+
Fix from $1,950 2022-08-16
Sv Cpt Mc310 Firmware CRITICAL 9.8
CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted …

No fix yet
Fix from $2,300 2022-06-21