Description
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Contec Co., Ltd. FXA5000
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXA5020
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXA5020-[][]
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXE5000
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXE5000-[][]
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXS5000-[][]
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXS5021
Default version status: unaffected
0 to < 1.12.00affected
Contec Co., Ltd. FXE4000
Default version status: unaffected
0 to < 1.14.00affected
Contec Co., Ltd. FXE4000-WP
Default version status: unaffected
0 to < 1.14.00affected
Contec Co., Ltd. FXS4000
Default version status: unaffected
0 to < 1.14.00affected
Contec Co., Ltd. FXS4020
Default version status: unaffected
0 to < 1.14.00affected
Contec Co., Ltd. FXA3000
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXA3000-[][]
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXA3020
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXA3020-[][]
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXA3200
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXE3000
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXE3000-[][]
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXE3000-WP
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. FXS300[]-CN
Default version status: unaffected
0 to < 1.20.00affected
Contec Co., Ltd. SGA1000
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. RP-WAH-SR1
Default version status: unaffected
0 to < 1.03affected
Contec Co., Ltd. RP-WAH-SR2
Default version status: unaffected
0 to < 1.03affected
Contec Co., Ltd. RP-WAH-SR12
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. RP-WAH-SR22
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. ECE1000
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. ECE1020
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. ECS1020
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*
Default version status: unaffected
0 to < 1.82affected
Contec Co., Ltd. Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1
Default version status: unaffected
0 to < 1.02affected
Contec Co., Ltd. Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041
Default version status: unaffected
0 to < 1.61affected
Contec Co., Ltd. PC-HELPER Wireless I/O DIO-0404RY-LWF
Default version status: unaffected
0 to < 1.01.00affected
Contec Co., Ltd. PC-HELPER Wireless I/O DIO-0404RY-LWF-US
Default version status: unaffected
0 to < 1.01.00affected
References
- https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf ↗
- https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf ↗
- https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_ph_26091000_en.pdf ↗
- https://jvn.jp/en/vu/JVNVU99009004/ ↗
- https://jvn.jp/en/vu/JVNVU96551518/ ↗
- https://jvn.jp/en/vu/JVNVU90314828/ ↗