CVE-2023-28657: High severity contec conprosys hmi system (chs) vulnerability
Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-28657.
What is the severity of CVE-2023-28657?
The severity of CVE-2023-28657 is high with a CVSS score of 8.8.
What is the affected software for CVE-2023-28657?
The affected software for CVE-2023-28657 is CONPROSYS HMI System (CHS) versions prior to 3.5.3.
How does CVE-2023-28657 impact the system?
CVE-2023-28657 allows a user to gain administrative privileges on the PC where the affected product is installed, potentially allowing unauthorized access and modification of product information.
How can I fix CVE-2023-28657?
To fix CVE-2023-28657, users should update CONPROSYS HMI System to version 3.5.3 or later as recommended by the vendor.