CVE-2023-22373

Description

References

• jvn.jp/en/vu/JVNVU96873821 · Patch
• cisa.gov/uscert/ics/advisories/icsa-22-347-03 · Third Party Advisory
• contec.com/api/downloadlogger · Patch
• contec.com/download/contract/contract4 · Patch

conprosys hmi system의 다른 취약점

• CVE-2025-34081높음 7.5The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data u…
• CVE-2025-34080보통 6.1The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could a…
• CVE-2023-29154높음 7.2SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product wit…
• CVE-2023-28824보통 4.9Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected p…
• CVE-2023-28713높음 8.1Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is…