Contec M2M Controller Configurable type CPS-MCS341* vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Contec M2M Controller Configurable type CPS-MCS341*: 3 record(s), with affected versions and fixes.
CVE-2026-82775
Medium · 4.3
CWE-548 Sep 14, 2026
An exposure of information through directory listing issue exists in CONPROSYS M2M…
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.
CVE-2026-82774
High · 8.8
CWE-78 Sep 14, 2026
OS Command Injection in Contec M2M Gateway Integrated Type CPS-MG341*
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVE-2026-82773
Medium · 6.1
CWE-79 Sep 14, 2026
Cross-site Scripting (XSS) in Contec M2M Gateway Integrated Type CPS-MG341*
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.