Contec Co. vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-82794 SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings.High 8.7 · Sep 14, 2026
• CVE-2026-82793 Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.High 8.6 · Sep 14, 2026
• CVE-2026-82791 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB ConvHigh 8.7 · Sep 14, 2026
• CVE-2026-82787 Missing authentication for critical function vulnerability exists in CPSL-08P1EN.High 8.7 · Sep 14, 2026
• CVE-2026-82786 Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.High 8.2 · Sep 14, 2026
• CVE-2026-82780 Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series.High 8.7 · Sep 14, 2026
• CVE-2026-82779 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series.High 8.7 · Sep 14, 2026
• CVE-2026-82777 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series.High 8.7 · Sep 14, 2026
• CVE-2026-82774 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M ControHigh 8.7 · Sep 14, 2026
• CVE-2026-82772 Buffer overflow vulnerability exists in Contec EC1000 series.High 8.7 · Sep 14, 2026
• CVE-2026-82770 Buffer overflow vulnerability exists in Contec RP-WAH-SR Series.High 8.7 · Sep 14, 2026
• CVE-2026-82768 Path traversal vulnerability exists in SGA1000.High 8.6 · Sep 14, 2026
• CVE-2026-82766 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000.High 8.7 · Sep 14, 2026
• CVE-2026-82765 Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.High 8.6 · Sep 14, 2026
• CVE-2026-82762 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 serieHigh 8.7 · Sep 14, 2026
• CVE-2023-29154 SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.High 7.2 · May 31, 2023
• CVE-2023-28713 Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.High 8.1 · May 31, 2023
• CVE-2023-28657 Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.High 8.8 · May 31, 2023
• CVE-2023-28399 Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.High 7.8 · May 31, 2023
• CVE-2023-27521 OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to VerHigh 8.8 · May 22, 2023
• CVE-2023-27518 Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to VerHigh 8.8 · May 22, 2023
• CVE-2023-27514 OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.1High 8.8 · May 22, 2023
• CVE-2023-27512 Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allowHigh 7.2 · May 22, 2023
• CVE-2023-22339 Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction High 7.5 · Jan 19, 2023
• CVE-2023-22331 Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials High 7.5 · Jan 19, 2023