CVE-2023-28399

概要

参考情報

• jvn.jp/en/vu/JVNVU93372935 · Third Party Advisory
• contec.com/api/downloadlogger · Vendor Advisory
• contec.com/jp/api/downloadlogger · Vendor Advisory

conprosys hmi system のその他の脆弱性

• CVE-2025-34081高 7.5The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data u…
• CVE-2025-34080中 6.1The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could a…
• CVE-2023-29154高 7.2SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product wit…
• CVE-2023-28824中 4.9Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected p…
• CVE-2023-28713高 8.1Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is…