CVE-2023-29154

HIGH · CVSS 7.2 EPSS 41.44%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-06-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-29154

Severity

HIGH

CVSS

7.2

EPSS

41.44%

Original NVD Description

SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.