Authentication Vulnerability in CONPROSYS HMI System by Contec

CVE-2023-22334

What is CVE-2023-22334?

The CONPROSYS HMI System is susceptible to a security vulnerability that allows remote authenticated attackers to gain unauthorized access to user credentials. This occurs due to the use of password hashes in place of actual passwords during authentication, making it feasible for attackers to initiate a man-in-the-middle attack and intercept user credentials. Users of CONPROSYS HMI System versions 3.4.5 and earlier are advised to review the security advisories and implement necessary safeguards to protect against this vulnerability.

References