PT-2023-21879 · Unknown · Conprosys Hmi System

·

CVE-2023-28657

·

Published

2023-06-01

·

Updated

2025-01-09

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CONPROSYS HMI System (CHS) versions prior to 3.5.3
Description An issue exists due to improper access control, allowing a user of the PC where the affected product is installed to potentially gain administrative privileges. This could result in the user obtaining and/or altering product information.
Recommendations For versions prior to 3.5.3, update to version 3.5.3 or later to resolve the issue.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-28657

Affected Products

Conprosys Hmi System