CVE-2023-29154

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3

High · published June 1, 2023

CVSS v3.1
7.2
EPSS
41%
Percentile
98.7
In the wild
Unconfirmed
What it is

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.41443 · 98.7th percentile
Published
2023-06-01T00:00Z
EPSS history
Timeline
  • 01 JUN 00:00Z
    SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3
    cvelistv5