CVE-2023-22334: Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated…

PriorityP430medium5.3CVSS 3.1

AVNACHPRLUINSUCHINAN

EPSS

0.88%

54.5th percentile

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
contec	conprosys_hmi_system	<= 3.4.5	—
contec_co_ltd	conprosys_hmi_system	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.