Authentication Vulnerability in CONPROSYS HMI System by Contec

CVE-2023-22334

What is CVE-2023-22334?

The CONPROSYS HMI System is susceptible to a security vulnerability that allows remote authenticated attackers to gain unauthorized access to user credentials. This occurs due to the use of password hashes in place of actual passwords during authentication, making it feasible for attackers to initiate a man-in-the-middle attack and intercept user credentials. Users of CONPROSYS HMI System versions 3.4.5 and earlier are advised to review the security advisories and implement necessary safeguards to protect against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References