Cross-site Scripting Vulnerability in CONPROSYS M2M Gateway and Controller Products
CVE-2026-82773

5.1MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
M2m Gateway Integrated Type Cps-mg341*
M2m Gateway Configurable Type Cps-mgs341*
M2m Controller Integrated Type Cps-mc341
M2m Controller Configurable Type Cps-mcs341*
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82773?

A cross-site scripting vulnerability has been identified in the CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series by Contec. When exploited, this flaw allows an attacker to execute arbitrary scripts in the web browser of a logged-in user, posing a significant risk to user data and integrity. It is essential for users of these products to assess their systems for potential exploitation and take appropriate measures to mitigate this risk.

Affected Version(s)

M2M Controller Configurable type CPS-MCS341* 0 < 4.1.0

M2M Controller Integrated Type CPS-MC341 0 < 4.1.0

M2M Gateway Configurable type CPS-MGS341* 0 < 4.1.0

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU96551518/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.