contec Vulnerabilities and Affected Products
Vulnerabilities associated with solarview_compact.
Products
Clear product- solarview_compact5 vulnerabilities
- CONPROSYS HMI System1 vulnerability
- sv-cpt-mc310_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-46509CRITICAL | An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. CWE-94Oct 27, 2023 | CVSS9.8v3.1 | EPSS0.807% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-29919CRITICAL | contec solarview_compact Incorrect Default PermissionsSolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted. | CVSS9.8v3.1 | EPSS60.2% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-23333CRITICAL | contec solarview_compact Improper Neutralization of Special Elements used in a Command ('Command Injection')There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php. | CVSS9.8v3.1 | EPSS99.3% | PoCs6 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2022-44354CRITICAL | contec solarview_compact Unrestricted Upload of File with Dangerous TypeSolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file. CWE-434Nov 29, 2022 | CVSS9.8v3.1 | EPSS2.13% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-40881CRITICAL | contec solarview_compact Improper Neutralization of Special Elements used in a Command ('Command Injection')SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php | CVSS9.8v3.1 | EPSS29.5% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |