CVE-2023-22334

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack.

• CWE-287
• CWE-287

• https://jvn.jp/en/vu/JVNVU96873821Patch, Third Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03Third Party Advisory, US Government Resource
• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdfPatch, Vendor Advisory
• https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90bPatch, Vendor Advisory
• https://jvn.jp/en/vu/JVNVU96873821Patch, Third Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03Third Party Advisory, US Government Resource
• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdfPatch, Vendor Advisory
• https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90bPatch, Vendor Advisory

Published

Jan 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22329Improper input validation in the BIOS firmware for some Inte…3.5
• CVE-2023-2233An improper authorization issue has been discovered in GitLa…4.3
• CVE-2023-22330Use of uninitialized resource in some Intel(R) NUC BIOS firm…4.4
• CVE-2023-22331Use of default credentials vulnerability in CONPROSYS HMI Sy…7.5
• CVE-2023-22332Information disclosure vulnerability exists in Pgpool-II 4.4…6.5
• CVE-2023-22333Cross-site scripting vulnerability in EasyMail 2.00.130 and …6.1
• CVE-2023-22335Improper access control vulnerability in SS1 Ver.13.0.0.40 a…7.5
• CVE-2023-22336Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlie…9.8
• CVE-2023-22337Improper input validation for some Intel Unison software may…7.5
• CVE-2023-22338Out-of-bounds read in some Intel(R) oneVPL GPU software befo…5.5
• CVE-2023-22339Improper access control vulnerability in CONPROSYS HMI Syste…7.5
• CVE-2023-2234Union variant confusion allows any malicious BT controller t…8.8