CVE-2026-82775

M2M Gateway Integrated Type CPS-MG341* · Vulnerability

CVSS 3.1 4.3 MEDIUMCVSS 4.0 5.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-82775

Published

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-82775

Published

M2M Gateway Integrated Type CPS-MG341*

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Contec Co., Ltd.",
                    "product": "M2M Gateway Integrated Type CPS-MG341*",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "4.1.0"
                        }
                    ]
                }

M2M Gateway Configurable type CPS-MGS341*

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Contec Co., Ltd.",
                    "product": "M2M Gateway Configurable type CPS-MGS341*",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "4.1.0"
                        }
                    ]
                }

M2M Controller Integrated Type CPS-MC341

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Contec Co., Ltd.",
                    "product": "M2M Controller Integrated Type CPS-MC341",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "4.1.0"
                        }
                    ]
                }

M2M Controller Configurable type CPS-MCS341*

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Contec Co., Ltd.",
                    "product": "M2M Controller Configurable type CPS-MCS341*",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "4.1.0"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON