CVE-2023-28399

Name of the Vulnerable Software and Affected Versions CONPROSYS HMI System (CHS) versions prior to 3.5.3

Description The issue is related to incorrect permission assignment for a critical resource in the CONPROSYS HMI System (CHS). The Access Control List (ACL) is not set correctly for the local folder where the product is installed, allowing a wide range of privileges to a user of the PC where the product is installed. This could enable the user to destroy the system and/or execute a malicious program.

Recommendations For CONPROSYS HMI System (CHS) versions prior to 3.5.3, update to version 3.5.3 or later to resolve the issue.