CVE-2025-34081: Contec Conprosys HMI System

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

Affected products

• Contec Conprosys HMI System: before 3.7.7 (fixed in 3.7.7)

Published 2025-07-01. Last modified 2026-06-17.