EUVD-2026-77217
GHSA-v74j-9rmc-ppr5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authenticated (PR:L) network-reachable injection yields full OS command execution; scope unchanged as compromise is contained within the FX device boundary.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
4DescriptionCVE.org
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
AnalysisAI
OS command injection in Contec FX5000, FX4000, and FX3000 series industrial data loggers and remote I/O units allows authenticated network attackers to execute arbitrary operating system commands on affected devices. Exploitation requires valid credentials to the device management interface but no additional configuration or user interaction, giving a successful attacker full command execution capability at OS level. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold valid credentials for the affected FX-series device (any account level satisfies the PR:L requirement) and to have network-level access to the device's management interface (AV:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 8.7 (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) correctly captures a high-severity authenticated flaw: low complexity, full CIA impact, but gated by the PR:L authentication prerequisite. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the firmware update provided in the Contec security advisory (contec_security_fl_26091000_en.pdf via the Contec support portal); exact patched firmware version numbers are not available in the current data and must be confirmed from the vendor advisory directly. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit network access to all Contec FX5000, FX4000, and FX3000 devices to identify exposed systems and restrict management interface access to authorized personnel only through firewall rules and network segmentation. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Path traversal via FTP in Contec FX5000, FX4000, and FX3000 series industrial programmable controllers allows an authent
Cross-site request forgery affects a broad range of Contec industrial data loggers, flow computers, and remote I/O coupl
Cross-site scripting in Contec FX5000, FX4000, and FX3000 series industrial data loggers allows a low-privileged authent
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today