CVE-2025-34081

High

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data…

VulnCheck·CWE-215·Published 2025-07-01

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

222 chars

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

NVDen

222 chars

NVDes

260 chars

Contec Co.,Ltd. CONPROSYS HMI System (CHS) expone una página de depuración PHP phpinfo() a usuarios no autenticados que puede contener datos confidenciales útiles para un atacante. Este problema afecta al sistema HMI CONPROSYS (CHS): antes de la versión 3.7.7.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
4.0	Primary	cve.org	6.9	—	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N