Ece1020
Monthly
Remote code execution affects the Contec EC1000 series (ECE1000, ECE1020, ECS1020) industrial devices, where a classic buffer overflow in the embedded web service allows a network-authenticated attacker to send a specially crafted HTTP request and execute arbitrary programs on the device. Reported by JPCERT/CC via JVN advisory JVNVU99009004, this is an embedded industrial controller flaw with full confidentiality, integrity, and availability impact. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-site scripting in Contec's EC1000 series web interface allows a low-privileged authenticated attacker to inject arbitrary scripts that execute in the browser of another logged-in user. Affected models confirmed by JPCERT/CC include the ECE1000, ECE1020, and ECS1020. No public exploit code has been identified at time of analysis, and exploitation requires both attacker authentication and active victim interaction.
Cross-site request forgery affects a broad range of Contec industrial data loggers, flow computers, and remote I/O coupler units, allowing network-reachable unauthenticated attackers to trigger unintended device operations against authenticated operator sessions. Per the CVSS 4.0 vector (AV:N/AC:L/UI:A), no attacker privileges are required - only a logged-in user who visits an attacker-controlled web page during an active management session. JPCERT/CC coordinated three separate JVN advisories (JVNVU99009004, JVNVU96551518, JVNVU90314828) covering distinct Contec product families, and no public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution affects the Contec EC1000 series (ECE1000, ECE1020, ECS1020) industrial devices, where a classic buffer overflow in the embedded web service allows a network-authenticated attacker to send a specially crafted HTTP request and execute arbitrary programs on the device. Reported by JPCERT/CC via JVN advisory JVNVU99009004, this is an embedded industrial controller flaw with full confidentiality, integrity, and availability impact. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-site scripting in Contec's EC1000 series web interface allows a low-privileged authenticated attacker to inject arbitrary scripts that execute in the browser of another logged-in user. Affected models confirmed by JPCERT/CC include the ECE1000, ECE1020, and ECS1020. No public exploit code has been identified at time of analysis, and exploitation requires both attacker authentication and active victim interaction.
Cross-site request forgery affects a broad range of Contec industrial data loggers, flow computers, and remote I/O coupler units, allowing network-reachable unauthenticated attackers to trigger unintended device operations against authenticated operator sessions. Per the CVSS 4.0 vector (AV:N/AC:L/UI:A), no attacker privileges are required - only a logged-in user who visits an attacker-controlled web page during an active management session. JPCERT/CC coordinated three separate JVN advisories (JVNVU99009004, JVNVU96551518, JVNVU90314828) covering distinct Contec product families, and no public exploit code or CISA KEV listing has been identified at time of analysis.