CVE-2023-28713

Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the information. As a result, information in the database may be obtained and/or altered by the user.

• CWE-312
• CWE-312

• https://jvn.jp/en/vu/JVNVU93372935/Third Party Advisory
• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdfVendor Advisory
• https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdfVendor Advisory
• https://jvn.jp/en/vu/JVNVU93372935/Third Party Advisory
• https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdfVendor Advisory
• https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdfVendor Advisory

Published

Jun 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28708When using the RemoteIpFilter with requests received from a …4.3
• CVE-2023-28709The fix for CVE-2023-24998 was incomplete for Apache Tomcat …7.5
• CVE-2023-2871A vulnerability was found in FabulaTech USB for Remote Deskt…5.5
• CVE-2023-28710Improper Input Validation vulnerability in Apache Software F…7.5
• CVE-2023-28711Insufficient control flow management in the Hyperscan Librar…5.5
• CVE-2023-28712Osprey Pump Controller version 1.01 contains an unauthentica…9.8
• CVE-2023-28714Improper access control in firmware for some Intel(R) PROSet…6.7
• CVE-2023-28715Improper access control in some Intel(R) oneAPI Toolkit and …5.5
• CVE-2023-28716mySCADA myPRO versions 8.26.0 and prior has parameters which…8.8
• CVE-2023-28718Osprey Pump Controller version 1.01 allows users to perform …8
• CVE-2023-2872A vulnerability classified as problematic has been found in …5.5
• CVE-2023-28720Improper initialization for some Intel(R) PROSet/Wireless an…6.5