Contec vulnerabilities1 known to be exploited.
Contec has 46 published vulnerabilities across 53 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Sv-Cpt-Mc310 Firmware, with 19. If you run Contec software, patch the exploited flaws first.
The most recent Contec flaw added to the known-exploited list is CVE-2022-29303, on 13 July 2023. We keep watching the known-exploited list.
Which Contec products have the most vulnerabilities?
Sv-Cpt-Mc310 Firmware leads with 19 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Contec vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8SolarView Compact Command Injection Vulnerability
SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.
Which Contec flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%CVE-2023-23333Critical
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
- 98%
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
- 70%CVE-2022-44456Critical
CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.
- 62%CVE-2023-28651Medium
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.
- 60%CVE-2023-29919Critical
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.
- 47%CVE-2021-20660Medium
Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors.
- 47%CVE-2022-29298High
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
- 41%CVE-2023-29154High
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.
- 30%CVE-2022-40881Critical
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
- 30%CVE-2014-2324Medium
Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a ..
All Contec products we track.
24 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Sv-Cpt-Mc310 Firmwaresv-cpt-mc310_firmware19 vulnerabilities4 versions
- Conprosys HMI Systemconprosys_hmi_system15 vulnerabilities8 versions
- Solarview Compactsolarview_compact7 vulnerabilities1 version
- Solarview Compact Firmwaresolarview_compact_firmware7 vulnerabilities5 versions
- Cps-Mc341-A1-111 Firmwarecps-mc341-a1-111_firmware3 vulnerabilities1 version
- Cps-Mc341-Adsc1-111 Firmwarecps-mc341-adsc1-111_firmware3 vulnerabilities1 version
- Cps-Mc341-Adsc1-931 Firmwarecps-mc341-adsc1-931_firmware3 vulnerabilities1 version
- Cps-Mc341-Adsc2-111 Firmwarecps-mc341-adsc2-111_firmware3 vulnerabilities1 version
- Cps-Mc341-Ds1-111 Firmwarecps-mc341-ds1-111_firmware3 vulnerabilities1 version
- Cps-Mc341-Ds11-111 Firmwarecps-mc341-ds11-111_firmware3 vulnerabilities1 version
- Cps-Mc341-Ds2-911 Firmwarecps-mc341-ds2-911_firmware3 vulnerabilities1 version
- Cps-Mc341g-Adsc1-110 Firmwarecps-mc341g-adsc1-110_firmware3 vulnerabilities1 version
- Cps-Mc341q-Adsc1-111 Firmwarecps-mc341q-adsc1-111_firmware3 vulnerabilities1 version
- Cps-Mcs341-Ds1-111 Firmwarecps-mcs341-ds1-111_firmware3 vulnerabilities1 version
- Cps-Mcs341-Ds1-131 Firmwarecps-mcs341-ds1-131_firmware3 vulnerabilities1 version
- Cps-Mcs341g-Ds1-130 Firmwarecps-mcs341g-ds1-130_firmware3 vulnerabilities1 version
- Cps-Mcs341g5-Ds1-130 Firmwarecps-mcs341g5-ds1-130_firmware3 vulnerabilities1 version
- Cps-Mcs341q-Ds1-131 Firmwarecps-mcs341q-ds1-131_firmware3 vulnerabilities1 version
- Cps-Mg341-Adsc1-111 Firmwarecps-mg341-adsc1-111_firmware3 vulnerabilities1 version
- Cps-Mg341-Adsc1-931 Firmwarecps-mg341-adsc1-931_firmware3 vulnerabilities1 version
- Cps-Mg341g-Adsc1-111 Firmwarecps-mg341g-adsc1-111_firmware3 vulnerabilities1 version
- Cps-Mg341g-Adsc1-930 Firmwarecps-mg341g-adsc1-930_firmware3 vulnerabilities1 version
- Cps-Mg341g5-Adsc1-931 Firmwarecps-mg341g5-adsc1-931_firmware3 vulnerabilities1 version
- Fxa3200 Firmwarefxa3200_firmware2 vulnerabilities1 version
This directory lists the 24 Contec products with at least one tracked version, of 53 in our catalogue.
Running Contec? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.
- Matched to
- Solarview Compact on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 46 published vulnerabilities across 53 products and 38 versions from Contec. The most recent Contec flaw added to the known-exploited list is CVE-2022-29303, on 13 July 2023.
1 Contec vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2022-29303. The full list is on this page.
Sv-Cpt-Mc310 Firmware, with 19 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Contec products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.