CVE-2023-22334 - CVE House
Back to Database
Status published Unknown CVE-2023-22334

Use of password hash instead of password for authentication vulnerability...

Vulnerability Description

Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22334

Credits & Attribution

No credits recorded in the NVD database.

References

More from Contec Co., Ltd.

View All →
CVE-2023-29154
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS)...
Unknown 0
CVE-2023-28824
Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS)...
Unknown 0
CVE-2023-28713
Plaintext storage of a password exists in CONPROSYS HMI System...
Unknown 0
CVE-2023-28657
Improper access control vulnerability exists in CONPROSYS HMI System (CHS)...
Unknown 0
CVE-2023-28651
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions...
Unknown 0

Affected Vendor

Contec Co., Ltd.

View all reports →

Affected Software

CONPROSYS HMI System (CHS)
Vulnerable Versions:
Ver.3.4.5 and earlier

Timeline

Official Publish: January 20th, 2023
Last Modified: April 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.