CVE-2025-34081

< 3.7.7

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensit

7.5HIGH

CVE-2025-34080

< 3.7.7

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality th

6.1MEDIUM

CVE-2023-29154

< 3.5.3

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected p

7.2HIGH

CVE-2023-28824

< 3.5.3

Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the

4.9MEDIUM

CVE-2023-28713

< 3.5.3

Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the d

8.1HIGH

CVE-2023-28657

< 3.5.3

Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the aff

8.8HIGH

CVE-2023-28651

< 3.5.3

Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affe

4.8MEDIUM

CVE-2023-28399

< 3.5.3

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Co

7.8HIGH

CVE-2023-2758

< 3.5.3

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismat

3.7LOW

CVE-2023-22324

< 3.5.1

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to exec

6.5MEDIUM

CVE-2023-22373

<= 3.4.5

Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to i

5.4MEDIUM

CVE-2023-22339

<= 3.4.5

Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker

7.5HIGH

CVE-2023-22334

<= 3.4.5

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allo

5.3MEDIUM

CVE-2023-22331

<= 3.4.5

Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attac

7.5HIGH

CVE-2022-44456

<= 3.4.4

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on th

9.8CRITICAL