Denial of service

2023-05-3115:15:00

PRIOn knowledge base

www.prio-n.com

denial of service

vulnerability

contec conprosys hmi system

remote attacker

unauthenticated

time-zone mismatch

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.

CPENameOperatorVersion
conprosys_hmi_systemlt3.5.3

CPE	Name	Operator	Version
	conprosys_hmi_system	lt	3.5.3

References

jvn.jp/en/vu/JVNVU93372935/index.html

www.tenable.com/security/research/tra-2023-21