This vulnerability involves a cross-site scripting (XSS) flaw in the CONPROSYS M2M Gateway Integrated Type CPS-MG341* and related M2M Controller Series products by Contec Co., Ltd. Versions from 0 up to but not including 4.1.0 are affected. Successful exploitation requires user interaction (UI:R) and can lead to execution of arbitrary scripts in the browser of an authenticated user, potentially impacting confidentiality and integrity but not availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, with low confidentiality and integrity impact and no availability impact.

If exploited, an attacker can execute arbitrary scripts in the context of a logged-in user's browser, which may lead to theft of sensitive information or session hijacking. The impact affects confidentiality and integrity but does not affect system availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor vendor communications for updates and apply any official fixes once available.