CVE-2023-28399

Katalog CVE

CVSS 7.8 · High EPSS 0,18%

Kerentanan Incorrect Permission Assignment for Critical Resource pada contec conprosys hmi system. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC where the affected product is installed. As a result, the user may be able to destroy the system and/or execute a malicious program.

Rincian

Terbit di NVD

1 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_ch... advisory vendor
• https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security... advisory vendor
• https://jvn.jp/en/vu/JVNVU93372935/ advisory pihak ketiga