CVE-2022-44456: CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is…

PriorityP181critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

69.88%

99.3th percentile

CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
contec	conprosys_hmi_system	<= 3.4.4	—
contec_co_ltd	conprosys_hmi_system	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Detect unauthenticated remote HTTP requests containing OS command injection payloads targeting CONPROSYS HMI System (CHS) Ver.3.4.4 and prior — look for specially crafted requests to the CHS web interface from unauthenticated sources ↗
→Alert on any inbound network connections to CONPROSYS HMI System servers from internet-facing or untrusted network segments, particularly unauthenticated requests that may carry command injection strings ↗

·No known public exploits specifically target this vulnerability at time of advisory publication; detection should focus on anomalous unauthenticated requests to CHS endpoints ↗
·The vulnerability carries a CVSS v3 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), indicating network-exploitable with no privileges or user interaction required and full scope impact — prioritize patching or network isolation ↗
·Affected versions are CHS Ver.3.4.4 and prior; Ver.3.5.0 and later are patched — version fingerprinting of exposed CHS instances is a useful detection/triage step ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.