TI-2024-05246 Aliases CVE-2024-5650 GHSA-xj2g-cv86-vc2c

Improper access control in Yokogawa Electric Corporation CENTUM CS 3000

LOW 39CWE-284Published 2024-06-17 · Updated 2024-08-01

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00339 27th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Yokogawa Electric Corporation	CENTUM CS 3000	R3.08.10 – R3.09.50	—	No fix listed	CNA
Yokogawa Electric Corporation	CENTUM VP	R4.01.00 – R4.03.00; R5.01.00 – R5.04.20; R6.01.00 – R6.11.10	—	No fix listed	CNA

CENTUM CS 3000 VendorYokogawa Electric Corporation Affected R3.08.10 – R3.09.50 Fixed in — No fix listed CNA
CENTUM VP VendorYokogawa Electric Corporation Affected R4.01.00 – R4.03.00; R5.01.00 – R5.04.20; R6.01.00 – R6.11.10 Fixed in — No fix listed CNA

CPE names CISA-ADP · 3

CPE	Versions	Role	Vendor
cpe:2.3:h:yokogawa:centum_cs_3000:r3.08.10:::::::*	r3.08.10	—	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp:r4.01.00::::-:::	r4.01.00	—	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp:r6.01.00:::::::*	r6.01.00	—	Yokogawa Electric Corporation

cpe:2.3:h:yokogawa:centum_cs_3000:r3.08.10:*:*:*:*:*:*:* Versions r3.08.10 — ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp:r4.01.00:*:*:*:-:*:*:* Versions r4.01.00 — ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp:r6.01.00:*:*:*:*:*:*:* Versions r6.01.00 — ·Yokogawa Electric Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-5650
2026-10-03 Alias added: GHSA-xj2g-cv86-vc2c

References

Advisory 1

https://web-material3.yokogawa.com/1/36044/files/YSAR-24-0002-E.pdf

TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0CRITICAL 9.0
TI-2014-03162 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000… CVSS 2.0HIGH 8.3
TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
TI-2014-00730 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
TI-2014-00727 Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow CVSS 2.0CRITICAL 9.3
TI-2014-04257 BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50… CVSS 2.0HIGH 7.5

See all 71 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences