Contec Co., Ltd. vulnerabilities, page 2
59 vulnerabilities
Known vulnerabilities in Contec Co., Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 49 products.
CVE-2026-82785contec co., ltd.remote i/o coupler unit (server type) cpsn-mcb271-*
EPSS score0.49%
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.CVE-2026-82780contec co., ltdcps-tm341g5mb-adsc1-931+2EPSS score0.61%
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product.CVE-2026-82765contec co., ltd.fxa3000+19EPSS score0.49%
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.CVE-2026-82788contec co., ltd.cpsl-08p1enEPSS score0.26%
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82762contec co., ltd.fxa3000+19EPSS score1.87%
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82763contec co., ltd.fxa3000+19EPSS score0.24%
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82768contec co., ltd.sga1000EPSS score0.49%
Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.CVE-2026-82783contec co., ltd.programmable remote i/o coupler unit (software plc type) cpsn-pcb271-s1-041+2EPSS score0.18%
Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials.CVE-2026-82767contec co., ltd.sga1000EPSS score0.24%
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82792contec co., ltd.can-2-usb+1EPSS score0.24%
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82777contec co., ltd.configurable type cps-pcs341[][]-ds1-1201+1EPSS score1.87%
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82793contec co., ltd.can-2-usb+1EPSS score0.63%
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.CVE-2026-82784contec co., ltd.remote i/o coupler unit (server type) cpsn-mcb271-*EPSS score0.34%
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output.CVE-2026-82782contec co., ltd.programmable remote i/o coupler unit (software plc type) cpsn-pcb271-s1-041+2EPSS score0.46%
Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.CVE-2026-82778contec co., ltd.configurable type cps-pcs341[][]-ds1-1201+1EPSS score0.45%
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.CVE-2026-82776contec co., ltd.configurable type cps-pcs341[][]-ds1-1201+1EPSS score0.26%
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82775contec co., ltd.m2m controller configurable type cps-mcs341*+3EPSS score0.45%
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.CVE-2026-82773contec co., ltd.m2m controller configurable type cps-mcs341*+3EPSS score0.26%
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.CVE-2026-82791contec co., ltd.can-2-usb+1EPSS score1.87%
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.CVE-2026-82796contec co., ltd.sv-cpt-mc310+1EPSS score0.24%
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.