Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-28824
HistoryJun 01, 2023 - 2:15 a.m.

Server side request forgery (ssrf)

2023-06-0102:15:00
PRIOn knowledge base
www.prio-n.com
server-side request forgery
ssrf
conprosys hmi system
administrative privilege bypass
database restriction bypass

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database.

CPENameOperatorVersion
conprosys_hmi_systemlt3.5.3

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

Related for PRION:CVE-2023-28824