Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-82774

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Contec Co., Ltd. M2M Gateway Integrated Type CPS-MG341*

Default version status: unaffected

  • 0 to < 4.1.0affected

Contec Co., Ltd. M2M Gateway Configurable type CPS-MGS341*

Default version status: unaffected

  • 0 to < 4.1.0affected

Contec Co., Ltd. M2M Controller Integrated Type CPS-MC341

Default version status: unaffected

  • 0 to < 4.1.0affected

Contec Co., Ltd. M2M Controller Configurable type CPS-MCS341*

Default version status: unaffected

  • 0 to < 4.1.0affected

References