CVE-2023-22324: Contec Conprosys HMI System

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.

Affected products

• Contec Conprosys HMI System: before 3.5.1 (fixed in 3.5.1)

Published 2023-01-30. Last modified 2026-06-17.