Read the docs

Yokogawa Electric Corporation

Records72All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high31CVSS 7.0–8.9

Exploited now

Yokogawa Electric Corporation records in CISA KEV

No Yokogawa Electric Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Centum Vp Firmware · all components

Priority MEDIUM 52

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06722 Published 2020-02-05 No fix listed CWE-787
Priority MEDIUM 49

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04173 Published 2020-02-05 No fix listed CWE-787
Priority MEDIUM 49

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04173 Published 2020-02-05 No fix listed CWE-787
Priority MEDIUM 46

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02065 Published 2020-08-05 No fix listed CWE-22
Priority MEDIUM 45

CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01587 Published 2020-08-05 No fix listed CWE-287
Priority MEDIUM 44

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00997 Published 2022-03-11 No fix listed CWE-798
Priority MEDIUM 44

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00968 Published 2022-03-11 No fix listed CWE-798
Priority MEDIUM 40

Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.0…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01059 Published 2022-03-11 No fix listed CWE-23
Priority LOW 37

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, fro…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00804 Published 2022-03-11 No fix listed CWE-117
Priority LOW 37

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, f…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00936 Published 2022-03-11 No fix listed CWE-23
Open these records in search →