Skip to content
Noroxi

Contec records

46 published records for vendor contec.

Researcher profile

Entered KEV
1 · 2.2%
Weaponized
2 · 4.3%
Pre-auth RCE
7
With a fix record
6.5%
Median publish → KEV
427 days

Records by year

  1. 21
  2. 22
  3. 23
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

46 records
  • CVE-2022-29303
    98Now

    SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    contec · sv-cpt-mc310 firmwareMay 12, 2022

  • CVE-2023-23333
    69This week

    There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restricti

    CriticalCVSS 9.8WeaponizedEPSS 99%

    contec · solarview compact firmwareFeb 6, 2023

  • CVE-2022-44456
    60This week

    CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server w

    CriticalCVSS 9.8No exploitEPSS 70%

    contec · conprosys hmi systemDec 18, 2022

  • CVE-2023-29919
    54Plan

    SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.

    CriticalCVSS 9.1Proof of conceptEPSS 60%

    contec · solarview compact firmwareMay 22, 2023

  • CVE-2022-40881
    48Plan

    SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    contec · solarview compact firmwareNov 17, 2022

  • CVE-2022-29298
    44Plan

    SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

    HighCVSS 7.5Proof of conceptEPSS 47%

    contec · sv-cpt-mc310 firmwareMay 12, 2022

  • CVE-2023-29154
    40Plan

    SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    HighCVSS 7.2No exploitEPSS 41%

    contec · conprosys hmi systemMay 31, 2023

  • CVE-2021-20658
    40Plan

    SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspec

    CriticalCVSS 9.8No exploitEPSS 4%

    contec · sv-cpt-mc310 firmwareFeb 24, 2021

  • CVE-2022-31374
    40Plan

    An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a

    CriticalCVSS 9.8No exploitEPSS 2%

    contec · sv-cpt-mc310 firmwareJun 21, 2022

  • CVE-2022-44354
    39Monitor

    SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

    CriticalCVSS 9.8No exploitEPSS 2%

    contec · solarview compact firmwareNov 29, 2022

  • CVE-2023-46509
    39Monitor

    An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.

    CriticalCVSS 9.8No exploitEPSS 1%

    contec · solarview compact firmwareOct 27, 2023

  • CVE-2023-28651
    38Monitor

    Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    MediumCVSS 4.8No exploitEPSS 62%

    contec · conprosys hmi systemMay 31, 2023

  • CVE-2021-20660
    38Monitor

    Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via u

    MediumCVSS 6.1No exploitEPSS 47%

    contec · sv-cpt-mc310 firmwareFeb 24, 2021

  • CVE-2021-20659
    36Monitor

    SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors.

    HighCVSS 8.8No exploitEPSS 2%

    contec · sv-cpt-mc310 firmwareFeb 24, 2021

  • CVE-2023-27917
    36Monitor

    OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenan

    HighCVSS 8.8No exploitEPSS 2%

    contec · cps-mg341-adsc1-111 firmwareApr 11, 2023

  • CVE-2023-27514
    36Monitor

    OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versi

    HighCVSS 8.8No exploitEPSS 2%

    contec · sv-cpt-mc310f firmwareMay 22, 2023

  • CVE-2023-27521
    36Monitor

    OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v

    HighCVSS 8.8No exploitEPSS 2%

    contec · sv-cpt-mc310f firmwareMay 22, 2023

  • CVE-2023-27518
    35Monitor

    Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v

    HighCVSS 8.8No exploitEPSS 2%

    contec · sv-cpt-mc310f firmwareMay 22, 2023

  • CVE-2022-35239
    35Monitor

    The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an in

    HighCVSS 8.8No exploitEPSS 1%

    contec · sv-cpt-mc310f firmwareAug 16, 2022

  • CVE-2022-36159
    35Monitor

    Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow.

    HighCVSS 8.8No exploitEPSS 1%

    contec · fxa3000 firmwareSep 26, 2022

  • CVE-2023-28657
    35Monitor

    Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    HighCVSS 8.8No exploitEPSS 1%

    contec · conprosys hmi systemMay 31, 2023

  • CVE-2021-20661
    33Monitor

    Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary file

    HighCVSS 8.1No exploitEPSS 2%

    contec · sv-cpt-mc310 firmwareFeb 24, 2021

  • CVE-2022-36158
    32Monitor

    Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious acto

    HighCVSS 8.0No exploitEPSS 2%

    contec · fxa3000 firmwareSep 26, 2022

  • CVE-2023-28713
    32Monitor

    Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    HighCVSS 8.1No exploitEPSS 0%

    contec · conprosys hmi systemMay 31, 2023

  • CVE-2023-40924
    31Monitor

    SolarView Compact < 6.00 is vulnerable to Directory Traversal.

    HighCVSS 7.5Proof of conceptEPSS 3%

    contec · solarview compact firmwareSep 8, 2023