Vulnerabilities > Contec > High

DATE CVE VULNERABILITY TITLE RISK
2023-01-20 CVE-2023-22339 Unspecified vulnerability in Contec Conprosys HMI System
Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.
network
low complexity
contec
7.5
2022-09-26 CVE-2022-36158 Forced Browsing vulnerability in Contec products
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).
low complexity
contec CWE-425
8.0
2022-09-26 CVE-2022-36159 Use of Hard-coded Credentials vulnerability in Contec products
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow.
low complexity
contec CWE-798
8.8
2022-06-21 CVE-2022-31374 Unrestricted Upload of File with Dangerous Type vulnerability in Contec Sv-Cpt-Mc310 Firmware 6.0
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
network
low complexity
contec CWE-434
7.5
2022-05-12 CVE-2022-29298 Path Traversal vulnerability in Contec Sv-Cpt-Mc310 Firmware 6.00
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
network
low complexity
contec CWE-22
7.5