CVE-2022-44456: Contec Conprosys HMI System

Critical severity, CVSS 9.8. EPSS: 69.9% chance of exploitation in the next 30 days.

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.

Affected products

• Contec Conprosys HMI System: up to and including 3.4.4

Published 2022-12-19. Last modified 2026-06-17.