Contec vulnerabilities
We track 36 vulnerabilities in Contec products across 60+ products. 36 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on September 14, 2026.
Latest Contec vulnerabilities
- 8.8 High severity
SV-CPT-MC310: Improper Neutralization of Special Elements used in an OS Command
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- 7.2 High severity
CAN-2-WF: Unrestricted Upload of File with Dangerous Type
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.
- 8.8 High severity
CAN-2-WF: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attack
- 8.8 High severity
CONPROSYS HMI System(CHS): Improper Neutralization of Directives in Dynamically Evaluated Code
An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary code may be executed by an attacker who can log in to the product.
- 9.8 Critical severity
CPSL-08P1EN: Missing Authentication for Critical Functionality
Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product may be operated by a remote attacker without authentication.
- 8.8 High severity
CPS-TM341G5MB-ADSC1-931: Unrestricted Upload of File with Dangerous Type
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product.
- 8.8 High severity
CPS-TM341G5MB-ADSC1-931: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- 8.8 High severity
Integrated Type CPS-PC341[][]-*-9201: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- 8.8 High severity
M2M Gateway Integrated Type CPS-MG341*: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attac
- 8.8 High severity
ECE1000: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.
- 8.8 High severity
RP-WAH-SR1: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.
- 8.1 High severity
SGA1000: Relative Path Traversal
Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
- 8.8 High severity
SGA1000: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- 8.1 High severity
FXA5000: Relative Path Traversal
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
- 8.8 High severity
FXA5000: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who ca
- 7.5 High severity
CONPROSYS HMI System (CHS): Insertion of Sensitive Information Into Debugging Code
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
- 7.2 High severity
CONPROSYS HMI System (CHS): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page
- 8.1 High severity
CONPROSYS HMI System (CHS): Cleartext Storage of Sensitive Information
Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the
- 8.8 High severity
CONPROSYS HMI System (CHS): Missing Authorization
Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained an
- 7.8 High severity
CONPROSYS HMI System (CHS): Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privil
- 8.8 High severity
SolarView Compact: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS command.
- 8.8 High severity
SolarView Compact: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbitrary code.
- 8.8 High severity
SolarView Compact: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.
- 7.2 High severity
SolarView Compact: Use of Hard-coded Credentials
Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and
- 9.1 Critical severity
Solarview Compact Firmware: Incorrect Default Permissions
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.
- 8.8 High severity
CONPROSYS IoT Gateway products: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privilege. The affected products and versions are as follows: M2M G
- 7.2 High severity
CONPROSYS IoT Gateway products: Inadequate Encryption Strength
Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the information, cause a denial-of-service (DoS) con
- 9.8 Critical severity
Solarview Compact Firmware: Improper Neutralization of Special Elements used in a Command
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
- 7.5 High severity
CONPROSYS HMI System (CHS): Improper Access Control
Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.
- 7.5 High severity
CONPROSYS HMI System (CHS): Improper Privilege Management
Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information.
- 9.8 Critical severity
CONPROSYS HMI System (CHS): Improper Neutralization of Special Elements used in an OS Command
CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.
- 8.8 High severity
Fxa3000 Firmware: Use of Hard-coded Credentials
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access
- 8.0 High severity
Fxa3000 Firmware: Direct Request
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).
- 8.8 High severity
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and…
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may b
- 9.8 Critical severity
Sv-cpt-mc310 Firmware: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
- 9.8 Critical severity
SolarView Compact Command Injection Exploited
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.