Cps Tm341Gmb Adsc1 931
Monthly
Arbitrary command execution via unrestricted file upload affects CONTEC's CONPROSYS TM Series industrial controllers (CPS-TM341G5MB-ADSC1-931, CPS-TM341MB-ADSC1-931, and CPS-TM341GMB-ADSC1-931). A remote attacker holding valid credentials can upload a specially crafted file through the device's management interface, causing the underlying system to execute attacker-controlled commands. The CVSS 4.0 score of 8.7 reflects full confidentiality, integrity, and availability compromise of the vulnerable system, with authentication as the sole barrier to exploitation. No public exploit or CISA KEV listing has been identified at time of analysis.
Authenticated OS command injection in Contec CONPROSYS TM Series industrial devices allows any logged-in user to execute arbitrary operating system commands on the underlying host. Specifically, three CPS-TM341 model variants are confirmed affected per JVN advisory JVNVU96551518. Exploitation is straightforward once credentials are obtained, making credential theft or default-credential abuse a natural precursor attack chain.
Arbitrary command execution via unrestricted file upload affects CONTEC's CONPROSYS TM Series industrial controllers (CPS-TM341G5MB-ADSC1-931, CPS-TM341MB-ADSC1-931, and CPS-TM341GMB-ADSC1-931). A remote attacker holding valid credentials can upload a specially crafted file through the device's management interface, causing the underlying system to execute attacker-controlled commands. The CVSS 4.0 score of 8.7 reflects full confidentiality, integrity, and availability compromise of the vulnerable system, with authentication as the sole barrier to exploitation. No public exploit or CISA KEV listing has been identified at time of analysis.
Authenticated OS command injection in Contec CONPROSYS TM Series industrial devices allows any logged-in user to execute arbitrary operating system commands on the underlying host. Specifically, three CPS-TM341 model variants are confirmed affected per JVN advisory JVNVU96551518. Exploitation is straightforward once credentials are obtained, making credential theft or default-credential abuse a natural precursor attack chain.