Contec CO.,LTD.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CONPROSYS IoT Gateway products | 3 | – | Apr 11, 2023 |
| CONPROSYS HMI System (CHS) | 2 | – | Jul 1, 2025 |
Exploited and recent CVEs
- CVE-2025-34081 CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info 0.7%
- CVE-2025-34080 CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting 1.3%
- CVE-2023-27389 Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file 0.5%
- CVE-2023-27917 OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privile 1.9%
- CVE-2023-23575 Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obt 0.7%