CVE-2023-22339

Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.

• CWE-284

• https://jvn.jp/en/vu/JVNVU96873821Patch, Third Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03Third Party Advisory, US Government Resource
• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdfPatch, Vendor Advisory
• https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90bPatch, Vendor Advisory
• https://jvn.jp/en/vu/JVNVU96873821Patch, Third Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03Third Party Advisory, US Government Resource
• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdfPatch, Vendor Advisory
• https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90bPatch, Vendor Advisory

Published

Jan 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22333Cross-site scripting vulnerability in EasyMail 2.00.130 and …6.1
• CVE-2023-22334Use of password hash instead of password for authentication …5.3
• CVE-2023-22335Improper access control vulnerability in SS1 Ver.13.0.0.40 a…7.5
• CVE-2023-22336Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlie…9.8
• CVE-2023-22337Improper input validation for some Intel Unison software may…7.5
• CVE-2023-22338Out-of-bounds read in some Intel(R) oneVPL GPU software befo…5.5
• CVE-2023-2234Union variant confusion allows any malicious BT controller t…8.8
• CVE-2023-22340On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.…7.5
• CVE-2023-22341On version 14.1.x before 14.1.5.3, and all versions of 13.1.…7.5
• CVE-2023-22342Improper input validation in some Intel(R) Thunderbolt(TM) D…7.7
• CVE-2023-22344Use of hard-coded credentials vulnerability in SS1 Ver.13.0.…9.8
• CVE-2023-22345Out-of-bound write vulnerability exists in Screen Creator Ad…7.8