← Back to CVE List
CVE-2026-82774NVD
Vulnerability Summary
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
CVSS v4.0 Base Metrics — Score 8.7 (HIGH)
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredLow
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)High
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
CVSS v3.1 Base Metrics — Score 8.8 (HIGH)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Contec Co., Ltd. M2M Gateway Integrated Type CPS-MG341* < 4.1.0
- Contec Co., Ltd. M2M Gateway Configurable type CPS-MGS341* < 4.1.0
- Contec Co., Ltd. M2M Controller Integrated Type CPS-MC341 < 4.1.0
- Contec Co., Ltd. M2M Controller Configurable type CPS-MCS341* < 4.1.0
- Contec Co., Ltd. M2M Gateway Integrated Type CPS-MG341* 4.1.0
- Contec Co., Ltd. M2M Gateway Configurable type CPS-MGS341* 4.1.0
- Contec Co., Ltd. M2M Controller Integrated Type CPS-MC341 4.1.0
- Contec Co., Ltd. M2M Controller Configurable type CPS-MCS341* 4.1.0