EUVD-2026-77229
GHSA-96r8-p5xp-47fv
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-delivered XSS requiring an authenticated user to interact; scope changes to browser context; no confidentiality or integrity impact on the vulnerable system itself.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
3DescriptionCVE.org
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
AnalysisAI
Cross-site scripting in Contec's CONPROSYS PAC Series industrial programmable automation controllers allows a remote unauthenticated attacker to inject arbitrary JavaScript that executes in the web browser of a logged-in management interface user. The flaw affects the Integrated Type CPS-PC341 and Configurable Type CPS-PCS341 product lines, with the attacker relying on social engineering to cause an authenticated operator to trigger the payload. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that an operator is actively logged in to the CONPROSYS PAC web management interface and is socially engineered into interacting with a malicious link or crafted content - the CVSS 4.0 UI:A metric confirms active user interaction is mandatory. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.1 (Medium) with vector AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N accurately reflects the threat model: network-reachable, low complexity, no privileges required from the attacker, but dependent on active user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch as detailed in the Contec security advisory (https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf) and the JPCERT/CC advisory JVNVU96551518 (https://jvn.jp/en/vu/JVNVU96551518/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
OS command injection in Contec's CONPROSYS PAC Series industrial automation controllers allows any authenticated user to
Directory listing exposure in CONTEC CONPROSYS PAC Series enables unauthenticated network attackers to enumerate interna
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today