Vulnerability Details : CVE-2023-22339
Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.
Products affected by CVE-2023-22339
- cpe:2.3:a:contec:conprosys_hmi_system:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-22339
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 49 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-22339
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
NIST |
References for CVE-2023-22339
-
https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03
Contec CONPROSYS HMI System (CHS) Update A | CISAThird Party Advisory;US Government Resource
-
https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b
Download License Agreement | CONTECPatch;Vendor Advisory
-
https://jvn.jp/en/vu/JVNVU96873821
JVNVU#96873821: Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)Patch;Third Party Advisory
-
https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf
Patch;Vendor Advisory
Jump to