Browse CVEs

HIGH 7.5 CVE-2025-34081 The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for… Conprosys Hmi System 3.7.7+ Fix from $1,9502025-07-01 MEDIUM 6.1 CVE-2025-34080 The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow refl… Conprosys Hmi System 3.7.7+ Fix from $1,6002025-07-01 CRITICAL 9.8 CVE-2023-46509 An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. Solarview Compact Firmware after 6.0 Fix from $2,3002023-10-27 HIGH 7.5 CVE-2023-40924 SolarView Compact < 6.00 is vulnerable to Directory Traversal. Solarview Compact Firmware 6.0+ Fix from $1,9502023-09-08 HIGH 8.8 CVE-2023-28657 Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is in… Conprosys Hmi System 3.5.3+ Fix from $1,9502023-06-01 HIGH 8.1 CVE-2023-28713 Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in… Conprosys Hmi System 3.5.3+ Fix from $1,9502023-06-01 HIGH 7.8 CVE-2023-28399 Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not … Conprosys Hmi System 3.5.3+ Fix from $1,9502023-06-01 HIGH 7.2 CVE-2023-29154EPSS 41% SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an admi… Conprosys Hmi System 3.5.3+ Fix from $1,9502023-06-01 MEDIUM 5.3 CVE-2023-2758 A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain confi… Conprosys Hmi System 3.5.3+ Fix from $1,6002023-05-31 HIGH 8.8 CVE-2023-27514 OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior… Sv Cpt Mc310f Firmware 8.10+ Fix from $1,9502023-05-23 HIGH 8.8 CVE-2023-27518 Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions p… Sv Cpt Mc310f Firmware 8.10+ Fix from $1,9502023-05-23 HIGH 8.8 CVE-2023-27521 OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions p… Sv Cpt Mc310f Firmware 8.10+ Fix from $1,9502023-05-23 HIGH 7.2 CVE-2023-27512 Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, whic… Sv Cpt Mc310f Firmware 8.10+ Fix from $1,9502023-05-23 CRITICAL 9.1 CVE-2023-29919EPSS 60% SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restrict… Solarview Compact Firmware after 6.0 Fix from $2,3002023-05-23 HIGH 8.8 CVE-2023-27917 OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page t… Cps Mg341 Adsc1 111 Firmware after 3.7.10 Fix from $1,9502023-04-11 HIGH 7.2 CVE-2023-27389 Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privileg… Cps Mg341 Adsc1 111 Firmware after 3.7.10 Fix from $1,9502023-04-11 CRITICAL 9.8 CVE-2023-23333EPSS 99% There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions throu… Solarview Compact Firmware after 6.00 Fix from $2,3002023-02-06 MEDIUM 6.5 CVE-2023-22324 SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQ… Conprosys Hmi System 3.5.1+ Fix from $1,6002023-01-30 HIGH 7.5 CVE-2023-22339 Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access r… Conprosys Hmi System after 3.4.5 Fix from $1,9502023-01-20 MEDIUM 5.4 CVE-2023-22373 Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary … Conprosys Hmi System after 3.4.5 Fix from $1,6002023-01-20 MEDIUM 5.3 CVE-2023-22334 Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authent… Conprosys Hmi System after 3.4.5 Fix from $1,6002023-01-20 HIGH 7.5 CVE-2023-22331 Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user c… Conprosys Hmi System after 3.4.5 Fix from $1,9502023-01-20 CRITICAL 9.8 CVE-2022-44456EPSS 70% CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the … Conprosys Hmi System after 3.4.4 Fix from $2,3002022-12-19 CRITICAL 9.8 CVE-2022-44354 SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file. Solarview Compact Firmware No fix yet Fix from $2,3002022-11-29 MEDIUM 6.1 CVE-2022-44355 SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php. Solarview Compact Firmware No fix yet Fix from $1,6002022-11-29 CRITICAL 9.8 CVE-2022-40881EPSS 29% SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php Solarview Compact Firmware No fix yet Fix from $2,3002022-11-17 HIGH 8.8 CVE-2022-36159 Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the pass… Fxa3000 Firmware 1.39.00+ Fix from $1,9502022-09-26 HIGH 8.0 CVE-2022-36158 Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to exe… Fxa3000 Firmware 1.39.00+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-35239 The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficien… Sv Cpt Mc310f Firmware 7.24+ Fix from $1,9502022-08-16 CRITICAL 9.8 CVE-2022-31374 An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted … Sv Cpt Mc310 Firmware No fix yet Fix from $2,3002022-06-21