Contec FX5000/FX4000/FX3000 series vulnerabilities

A path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. An attacker with FTP access to the product may view and/or alter arbitrary files on the server.

A cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.

An OS Command Injection issue exists in Contec FX5000 series, FX4000 series, and FX3000 series due to improper neutralization of special elements. An attacker who can log in to the product may execute arbitrary OS commands.