Contec

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Contec product.

RSS Feeds for Contec security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Contec products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Contec Sorted by Most Security Vulnerabilities since 2018

Contec Conprosys Hmi System15 vulnerabilities

Contec Solarview Compact Firmware6 vulnerabilities

Contec Sv Cpt Mc310 Firmware1 vulnerability

By the Year

In 2026 there have been 0 vulnerabilities in Contec. Last year, in 2025 Contec had 2 security vulnerabilities published. Right now, Contec is on track to have less security vulnerabilities in 2026 than it did last year.

Year	Vulnerabilities	Average Score
2026	0	0.00
2025	2	0.00
2024	0	0.00
2023	15	7.19
2022	5	9.06

It may take a day or so for new Contec vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Contec Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2025-34081	Jul 01, 2025	CONPROSYS HMI SYS (CHS) PHP phpinfo() Exposure <v3.7.7 The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.	Conprosys Hmi System
CVE-2025-34080	Jul 01, 2025	XSS in CONPROSYS HMI System (CHS) getqsetting.php (before 3.7.7) The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.	Conprosys Hmi System
CVE-2023-46509	Oct 27, 2023	Arbitrary code exec in Contec SolarView Compact <=6.0 via texteditor.php An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.	Solarview Compact Firmware
CVE-2023-28651	Jun 01, 2023	XSS: CONPROSYS HMI System (CHS) <3.5.3 Arbitrary Script Exec Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.	Conprosys Hmi System
CVE-2023-28399	Jun 01, 2023	CONPROSYS HMI (CHS) Priv Escalation via Inadequate Folder ACL Fixed 3.5.3 Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC where the affected product is installed. As a result, the user may be able to destroy the system and/or execute a malicious program.	Conprosys Hmi System
CVE-2023-28657	Jun 01, 2023	Improper Access Control in CONPROSYS HMI (CHS) <3.5.3 (Admin Priv Esc) Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user.	Conprosys Hmi System
CVE-2023-28713	Jun 01, 2023	Plaintext Storage of DB Passwords in CONPROSYS CHS <3.5.3 (CVE-2023-28713) Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the information. As a result, information in the database may be obtained and/or altered by the user.	Conprosys Hmi System
CVE-2023-28824	Jun 01, 2023	SSRF in CONPROSYS HMI System (CHS) <3.5.3 Allows DB Bypass by Admin Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database.	Conprosys Hmi System
CVE-2023-29154	Jun 01, 2023	SQLi via query setting page in CONPROSYS CHS <3.5.3 SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.	Conprosys Hmi System
CVE-2023-2758	May 31, 2023	Contec CONPROSYS HMI v3.5.2 & Prior: DoS via TimeZone Mismatch A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.	Conprosys Hmi System