Contec: community verdicts
2 notable / known-exploited Contec CVEs the community has triaged.
ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Contec CVE, see NVD ↗.
Show as table
| Year published | CVEs | In CISA KEV |
|---|---|---|
| 2022 | 1 | 1 |
| 2023 | 1 | 0 |
Exploitation first, with newly exploited CVEs rising above old ones
- CVE-2022-29303CRIT 9.8KEVEPSS 98%
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
- CVE-2023-29154HIGH 7.2EPSS 41%
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.