CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an…
Priority LOW 35Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
Why it matters now
EPSS 0.01235 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Yokogawa Electric Corporation | CENTUM VP / CS 3000 controller FCS | CP31, CP33, CP345, CP401, CP451 | — | No fix listed | CNA |
- CENTUM VP / CS 3000 controller FCS VendorYokogawa Electric Corporation Affected CP31, CP33, CP345, CP401, CP451 Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:yokogawa:centum_cs_3000_cp401_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000_cp401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_cs_3000_cp451_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000_cp451:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_cs_3000_cp33_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000_cp33:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_cs_3000_cp345_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000_cp345:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_cs_3000_cp31_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000_cp31:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
- cpe:2.3:o:yokogawa:centum_cs_3000_cp401_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000_cp401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_cs_3000_cp451_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000_cp451:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_cs_3000_cp33_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000_cp33:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_cs_3000_cp345_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000_cp345:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_cs_3000_cp31_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000_cp31:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:yokogawa:centum_vp_3000_cp401_firmware:*:*:*:*:*:*:*:* | r4.01.00 – r4.03.00; r5.01.00 to before r5.04.78; r6.01.00 to before r6.03.10 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_vp_3000_cp401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_vp_3000_cp451_firmware:*:*:*:*:*:*:*:* | r4.01.00 – r4.03.00; r5.01.00 to before r5.04.78; r6.01.00 to before r6.03.10 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_vp_3000_cp451:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
- cpe:2.3:o:yokogawa:centum_vp_3000_cp401_firmware:*:*:*:*:*:*:*:* Versions r4.01.00 – r4.03.00; r5.01.00 to before r5.04.78; r6.01.00 to before r6.03.10 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_vp_3000_cp401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_vp_3000_cp451_firmware:*:*:*:*:*:*:*:* Versions r4.01.00 – r4.03.00; r5.01.00 to before r5.04.78; r6.01.00 to before r6.03.10 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_vp_3000_cp451:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-33939
- 2026-10-03 Alias added: GHSA-hg36-5628-7f89
References
Sources
- CVE-2022-33939 · CVE Program
- CVE-2022-33939 · NVD
- FIRST EPSS
- GHSA-hg36-5628-7f89 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences