EUVD-2026-77227
GHSA-x4jg-jxpj-368p
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible, low-complexity injection requiring only authentication (PR:L); no scope change; full triad impact on the vulnerable device.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
4DescriptionCVE.org
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
AnalysisAI
OS command injection in CONPROSYS M2M Gateway and M2M Controller Series (CONTEC Co., Ltd.) allows an authenticated attacker to execute arbitrary operating system commands on affected industrial gateway devices. The vulnerability affects both the integrated and configurable variants of the CPS-MG341, CPS-MGS341, CPS-MC341, and CPS-MCS341 product lines, which are OT/IoT bridging devices commonly deployed in industrial automation environments. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid login session on the affected CONPROSYS device - the CVSS 4.0 PR:L metric confirms at least low-privilege authentication is required. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 accurately reflects the straightforward exploitability once authentication is achieved: no attack-specific conditions (AT:N), low complexity (AC:L), and full triad impact (VC:H/VI:H/VA:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the CONTEC security advisory at https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf and the JVN disclosure at https://jvn.jp/en/vu/JVNVU96551518/ for vendor-confirmed patch details and exact remediated firmware versions - specific fix version numbers are not independently confirmed from the available intelligence. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit your environment for all CONPROSYS M2M Gateway and M2M Controller devices, documenting model numbers, firmware versions, and network roles. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Directory listing exposure in Contec's CONPROSYS M2M Gateway and M2M Controller Series allows a remote attacker to enume
Cross-site scripting in the embedded web management interface of Contec CONPROSYS M2M Gateway and Controller Series devi
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today