EUVD-2026-77230
GHSA-q9q2-mr46-wrp2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible interface, low-privilege login required; no scope change as the impact is confined to the controller itself.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
4DescriptionCVE.org
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
AnalysisAI
OS command injection in Contec's CONPROSYS PAC Series industrial automation controllers allows any authenticated user to execute arbitrary OS-level commands on the device. Affected hardware includes the Integrated Type CPS-PC341 and Configurable Type CPS-PCS341 series programmable automation controllers, reported by JPCERT/CC. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid login account on the CONPROSYS PAC device - confirmed by the description ('attacker who can log in to the product') and by PR:L in the CVSS 4.0 vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 with vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H accurately reflects the severity once an attacker has authenticated. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Contec security advisory (https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf) and the JVN advisory (https://jvn.jp/en/vu/JVNVU96551518/) for patched firmware versions; exact remediated version numbers are not independently confirmed from the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete asset inventory of all Contec CONPROSYS PAC Series controllers (CPS-PC341 Integrated and CPS-PCS341 Configurable types) and identify which are internet-facing or accessible to untrusted networks; implement emergency network segmentation to isolate these devices from other critical systems if not already in place. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Directory listing exposure in CONTEC CONPROSYS PAC Series enables unauthenticated network attackers to enumerate interna
Cross-site scripting in Contec's CONPROSYS PAC Series industrial programmable automation controllers allows a remote una
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today