Conprosys Hmi System vulnerabilities
8 known vulnerabilities in Conprosys Hmi System from Contec. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
CONPROSYS HMI System (CHS): Insertion of Sensitive Information Into Debugging Code
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
- 7.2 High severity
CONPROSYS HMI System (CHS): Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page
- 8.1 High severity
CONPROSYS HMI System (CHS): Cleartext Storage of Sensitive Information
Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the
- 8.8 High severity
CONPROSYS HMI System (CHS): Missing Authorization
Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained an
- 7.8 High severity
CONPROSYS HMI System (CHS): Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privil
- 7.5 High severity
CONPROSYS HMI System (CHS): Improper Access Control
Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.
- 7.5 High severity
CONPROSYS HMI System (CHS): Improper Privilege Management
Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information.
- 9.8 Critical severity
CONPROSYS HMI System (CHS): Improper Neutralization of Special Elements used in an OS Command
CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.