Contec CO.,LTD.

Products

ProductCVEsExploitedLatest
CONPROSYS IoT Gateway products3–Apr 11, 2023
CONPROSYS HMI System (CHS)2–Jul 1, 2025

Exploited and recent CVEs

  • CVE-2025-34081 Medium 6.9 CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info 0.7%
  • CVE-2025-34080 Medium 5.1 CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting 1.3%
  • CVE-2023-27389 High 7.2 Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file 0.5%
  • CVE-2023-27917 High 8.8 OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privile 1.9%
  • CVE-2023-23575 Medium 4.3 Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obt 0.7%