CveMateVulnerability intelligence

Contec Co., Ltd. vulnerabilities

59 vulnerabilities

Known vulnerabilities in Contec Co., Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 49 products.

Products

49

Solarview Compact13 vulnerabilities
Conprosys HMI System (Chs)12 vulnerabilities
Remote I/O Coupler Unit (Server Type) CPSN Mcb271 *7 vulnerabilities
Fxa30004 vulnerabilities
Fxa3000 [][]4 vulnerabilities
Fxa30204 vulnerabilities
Fxa3020 [][]4 vulnerabilities
Fxa32004 vulnerabilities
Fxa50004 vulnerabilities
Fxa50204 vulnerabilities
Fxa5020 [][]4 vulnerabilities
Fxe30004 vulnerabilities
Fxe3000 [][]4 vulnerabilities
Fxe3000 WP4 vulnerabilities
Fxe40004 vulnerabilities
Fxe4000 WP4 vulnerabilities
Fxe50004 vulnerabilities
Fxe5000 [][]4 vulnerabilities
Fxs300[] CN4 vulnerabilities
Fxs40004 vulnerabilities
Fxs40204 vulnerabilities
Fxs5000 [][]4 vulnerabilities
Fxs50214 vulnerabilities
Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN Pcb271 S1 0414 vulnerabilities
Remote I/O Coupler Unit (Ethernet/Ip Adapter) CPSN Eob471Ei []14 vulnerabilities
Sga10004 vulnerabilities
CAN 2 USB3 vulnerabilities
CAN 2 WF3 vulnerabilities
Configurable Type CPS Pcs341[][] DS1 12013 vulnerabilities
Ece10003 vulnerabilities
Ece10203 vulnerabilities
Ecs10203 vulnerabilities
Integrated Type CPS Pc341[][] * 92013 vulnerabilities
M2M Controller Configurable Type CPS Mcs341*3 vulnerabilities
M2M Controller Integrated Type CPS Mc3413 vulnerabilities
M2M Gateway Configurable Type CPS Mgs341*3 vulnerabilities
M2M Gateway Integrated Type CPS Mg341*3 vulnerabilities
RP WAH SR13 vulnerabilities
RP WAH SR123 vulnerabilities
RP WAH SR23 vulnerabilities
RP WAH SR223 vulnerabilities
SV CPT Mc3103 vulnerabilities
SV CPT Mc310F3 vulnerabilities
CPS Tm341G5Mb Adsc1 9312 vulnerabilities
CPS Tm341Gmb Adsc1 9312 vulnerabilities
CPS Tm341Mb Adsc1 9312 vulnerabilities
CPSL 08P1En2 vulnerabilities
PC Helper Wireless I/O DIO 0404Ry LWF2 vulnerabilities
PC Helper Wireless I/O DIO 0404Ry LWF US2 vulnerabilities

CVE-2021-20659contec co., ltd.solarview compact+15y ago24-02-2021 03:51

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.CVE-2021-20661contec co., ltd.solarview compact+15y ago24-02-2021 03:51

Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors.CVE-2021-20662contec co., ltd.solarview compact+15y ago24-02-2021 03:51

Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors.CVE-2021-20656contec co., ltd.solarview compact+15y ago24-02-2021 03:51

Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecified vectors.CVE-2021-20658contec co., ltd.solarview compact+15y ago24-02-2021 03:51

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors.CVE-2021-20660contec co., ltd.solarview compact+15y ago24-02-2021 03:51

Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors.CVE-2021-20657contec co., ltd.solarview compact+15y ago24-02-2021 03:51

Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting information without the access privilege via unspecified vectors.CVE-2022-44456contec co., ltd.conprosys hmi system (chs)+13y ago19-12-2022 00:00

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.CVE-2022-35239contec co., ltd.solarview compact+24y ago16-08-2022 07:01

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated attacker uploads a specially crafted PHP file.CVE-2026-82774contec co., ltd.m2m controller configurable type cps-mcs341*+31mo ago14-09-2026 06:39

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82795contec co., ltd.sv-cpt-mc310+11mo ago14-09-2026 06:46

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82764contec co., ltd.ece1000+321mo ago14-09-2026 06:37

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.CVE-2026-82790contec co., ltd.pc-helper wireless i/o dio-0404ry-lwf+11mo ago14-09-2026 06:45

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82779contec co., ltdcps-tm341g5mb-adsc1-931+21mo ago14-09-2026 06:41

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82769contec co., ltd.rp-wah-sr1+31mo ago14-09-2026 06:38

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82794contec co., ltd.sv-cpt-mc310+11mo ago14-09-2026 06:46

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82770contec co., ltd.rp-wah-sr1+31mo ago14-09-2026 06:38

Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.CVE-2026-82771contec co., ltd.ece1000+21mo ago14-09-2026 06:39

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82781contec co., ltd.programmable remote i/o coupler unit (software plc type) cpsn-pcb271-s1-041+21mo ago14-09-2026 06:41

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82766contec co., ltd.sga10001mo ago14-09-2026 06:37

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.