İçeriğe atla
Noroxi

contec kayıtları

contec üreticisine ait 46 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %2,2
Silahlaştırılmış
2 · %4,3
Pre-auth RCE
7
Düzeltme kaydı olan
%6,5
Yayından KEV’e ortanca
427 gün

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

46 kayıt
  • CVE-2022-29303
    98Hemen

    SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    contec · sv-cpt-mc310 firmware12 May 2022

  • CVE-2023-23333
    69Bu hafta

    There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restricti

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    contec · solarview compact firmware6 Şub 2023

  • CVE-2022-44456
    60Bu hafta

    CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server w

    KritikCVSS 9,8İstismar yokEPSS %70

    contec · conprosys hmi system18 Ara 2022

  • CVE-2023-29919
    54Planlayın

    SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.

    KritikCVSS 9,1Kavram kanıtıEPSS %60

    contec · solarview compact firmware22 May 2023

  • CVE-2022-40881
    48Planlayın

    SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    contec · solarview compact firmware17 Kas 2022

  • CVE-2022-29298
    44Planlayın

    SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    contec · sv-cpt-mc310 firmware12 May 2022

  • CVE-2023-29154
    40Planlayın

    SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    YüksekCVSS 7,2İstismar yokEPSS %41

    contec · conprosys hmi system31 May 2023

  • CVE-2021-20658
    40Planlayın

    SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspec

    KritikCVSS 9,8İstismar yokEPSS %4

    contec · sv-cpt-mc310 firmware24 Şub 2021

  • CVE-2022-31374
    40Planlayın

    An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a

    KritikCVSS 9,8İstismar yokEPSS %2

    contec · sv-cpt-mc310 firmware21 Haz 2022

  • CVE-2022-44354
    39İzleyin

    SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

    KritikCVSS 9,8İstismar yokEPSS %1

    contec · solarview compact firmware29 Kas 2022

  • CVE-2023-46509
    39İzleyin

    An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.

    KritikCVSS 9,8İstismar yokEPSS %1

    contec · solarview compact firmware27 Eki 2023

  • CVE-2023-28651
    38İzleyin

    Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    OrtaCVSS 4,8İstismar yokEPSS %62

    contec · conprosys hmi system31 May 2023

  • CVE-2021-20660
    38İzleyin

    Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via u

    OrtaCVSS 6,1İstismar yokEPSS %47

    contec · sv-cpt-mc310 firmware24 Şub 2021

  • CVE-2021-20659
    36İzleyin

    SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors.

    YüksekCVSS 8,8İstismar yokEPSS %2

    contec · sv-cpt-mc310 firmware24 Şub 2021

  • CVE-2023-27917
    36İzleyin

    OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenan

    YüksekCVSS 8,8İstismar yokEPSS %2

    contec · cps-mg341-adsc1-111 firmware11 Nis 2023

  • CVE-2023-27514
    36İzleyin

    OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versi

    YüksekCVSS 8,8İstismar yokEPSS %2

    contec · sv-cpt-mc310f firmware22 May 2023

  • CVE-2023-27521
    36İzleyin

    OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v

    YüksekCVSS 8,8İstismar yokEPSS %2

    contec · sv-cpt-mc310f firmware22 May 2023

  • CVE-2023-27518
    35İzleyin

    Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v

    YüksekCVSS 8,8İstismar yokEPSS %2

    contec · sv-cpt-mc310f firmware22 May 2023

  • CVE-2022-35239
    35İzleyin

    The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an in

    YüksekCVSS 8,8İstismar yokEPSS %1

    contec · sv-cpt-mc310f firmware16 Ağu 2022

  • CVE-2022-36159
    35İzleyin

    Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow.

    YüksekCVSS 8,8İstismar yokEPSS %1

    contec · fxa3000 firmware26 Eyl 2022

  • CVE-2023-28657
    35İzleyin

    Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    YüksekCVSS 8,8İstismar yokEPSS %1

    contec · conprosys hmi system31 May 2023

  • CVE-2021-20661
    33İzleyin

    Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary file

    YüksekCVSS 8,1İstismar yokEPSS %2

    contec · sv-cpt-mc310 firmware24 Şub 2021

  • CVE-2022-36158
    32İzleyin

    Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious acto

    YüksekCVSS 8,0İstismar yokEPSS %2

    contec · fxa3000 firmware26 Eyl 2022

  • CVE-2023-28713
    32İzleyin

    Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.

    YüksekCVSS 8,1İstismar yokEPSS %0

    contec · conprosys hmi system31 May 2023

  • CVE-2023-40924
    31İzleyin

    SolarView Compact < 6.00 is vulnerable to Directory Traversal.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    contec · solarview compact firmware8 Eyl 2023