Login Request a demo
CH
Product
Conprosys Hmi System
by Contec · last CVE Jul 1, 2025
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 1High 7Medium 7Low 0
Severity
All severities15Critical1High7Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Conprosys Hmi System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-44456
9.8
70%
Dec 19
CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending…
Affected: through 3.4.4
CVE-2023-28657
8.8
1%
Jun 1
Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3
Affected: before 3.5.3
CVE-2023-28713
8.1
0%
Jun 1
Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3
Affected: before 3.5.3
CVE-2023-28399
7.8
0%
Jun 1
Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3
Affected: before 3.5.3
CVE-2025-34081
7.5
1%
Jul 1
CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
Affected: before 3.7.7
CVE-2023-22339
7.5
1%
Jan 20
Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the…
Affected: through 3.4.5
CVE-2023-22331
7.5
1%
Jan 20
Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information
Affected: through 3.4.5
CVE-2023-29154
7.2
41%
Jun 1
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3
Affected: before 3.5.3
CVE-2023-22324
6.5
1%
Jan 30
SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command
Affected: before 3.5.1
CVE-2025-34080
6.1
1%
Jul 1
CONPROSYS HMI System (CHS) < 3.7.7 Reflected Cross-Site Scripting
Affected: before 3.7.7
CVE-2023-22373
5.4
2%
Jan 20
Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the…
Affected: through 3.4.5
CVE-2023-2758
5.3
1%
May 31
A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior
Affected: before 3.5.3
CVE-2023-22334
5.3
1%
Jan 20
Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user…
Affected: through 3.4.5
CVE-2023-28824
4.9
1%
Jun 1
Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3
Affected: before 3.5.3
CVE-2023-28651
4.8
62%
Jun 1
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3
Affected: before 3.5.3
Showing 15