Read the docs

Yokogawa Electric Corporation

Records72All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high31CVSS 7.0–8.9

Exploited now

Yokogawa Electric Corporation records in CISA KEV

No Yokogawa Electric Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

72 records

Priority HIGH 75

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

CVSS 2.0CRITICAL 9.0 Network No auth Interaction — EPSS 0.67618 Published 2014-03-14 Fixed in R3.09.50 CWE-121
Priority HIGH 71

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.62312 Published 2014-07-10 No fix listed CWE-119
Priority HIGH 69

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.56688 Published 2014-05-16 Fixed in R3.09.50 CWE-121
Priority MEDIUM 62

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.359 Published 2014-03-14 Fixed in R3.09.50 CWE-121
Priority MEDIUM 62

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.

CVSS 2.0CRITICAL 9.3 Network No auth Interaction — EPSS 0.26299 Published 2014-03-14 Fixed in R3.09.50 CWE-122
Priority MEDIUM 53

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.22543 Published 2014-12-22 No fix listed CWE-284
Priority MEDIUM 52

Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that could allow an attac…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06852 Published 2018-07-31 No fix listed CWE-798
Priority MEDIUM 52

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06722 Published 2020-02-05 No fix listed CWE-787
Priority MEDIUM 50

Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00752 Published 2025-04-18 No fix listed CWE-1188
Priority MEDIUM 50

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) al…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05405 Published 2019-02-13 No fix listed CWE-287
Priority MEDIUM 49

Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earli…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03972 Published 2019-01-09 No fix listed CWE-119
Priority MEDIUM 49

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04173 Published 2020-02-05 No fix listed CWE-787
Priority MEDIUM 49

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04173 Published 2020-02-05 No fix listed CWE-787
Priority MEDIUM 46

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02065 Published 2020-08-05 No fix listed CWE-22
Priority MEDIUM 46

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to cont…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01865 Published 2018-10-12 No fix listed CWE-522
Priority MEDIUM 45

CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01587 Published 2020-08-05 No fix listed CWE-287
Priority MEDIUM 44

Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to cause the product to crash by processing a long file name.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00946 Published 2022-10-24 No fix listed CWE-787
Priority MEDIUM 44

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00997 Published 2022-03-11 No fix listed CWE-798
Priority MEDIUM 44

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00968 Published 2022-03-11 No fix listed CWE-798
Priority MEDIUM 43

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2022-03-18 No fix listed CWE-120
Priority MEDIUM 41

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00981 Published 2022-04-15 No fix listed CWE-287
Load more
Open these records in search →