Vulnerability · Published May 31, 2023 · Assigned by tenable
CVE-2023-2758Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service
Low 3.7
In plain English
A low-severity security flaw in CONPROSYS HMI System from Contec. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)1.0%top 35.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Contec | CONPROSYS HMI System | 0 – through 3.5.2 |
Weakness: CWE-799 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L