Priority MEDIUM 52
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06722 · Published 2020-02-05 · No fix listed CWE-787
Priority MEDIUM 49
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04173 · Published 2020-02-05 · No fix listed CWE-787
Priority MEDIUM 49
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04173 · Published 2020-02-05 · No fix listed CWE-787
Priority MEDIUM 46
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02065 · Published 2020-08-05 · No fix listed CWE-22
Priority MEDIUM 45
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allo…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01587 · Published 2020-08-05 · No fix listed CWE-287
Priority MEDIUM 40
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00945 · Published 2022-03-11 · No fix listed CWE-302
Priority MEDIUM 40
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.0…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01059 · Published 2022-03-11 · No fix listed CWE-23
Priority LOW 39
Violation of secure design principles exists in the communication of CAMS for HIS.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00594 · Published 2022-06-28 · No fix listed
Priority LOW 39
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03342 · Published 2019-01-09 · No fix listed CWE-20
Priority LOW 37
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, fro…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00804 · Published 2022-03-11 · No fix listed CWE-117
Priority LOW 37
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00804 · Published 2022-03-11 · No fix listed CWE-400
Priority LOW 37
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, f…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00936 · Published 2022-03-11 · No fix listed CWE-23
Priority LOW 33
The following Yokogawa Electric products contain insecure DLL loading issues.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00219 · Published 2022-03-11 · No fix listed CWE-427
Priority LOW 33
'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2022-03-11 · No fix listed CWE-732
Priority LOW 33
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00206 · Published 2022-03-11 · No fix listed CWE-732