Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If a computer on which the affected product is installed receives a large number of UDP broadcast packets in a short period, occasionally that computer may restart. If both the active and standby computers are restarted at the same time, the functionality on that computer may be temporarily unavailable.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Yokogawa Electric Corporation | Dual-redundant Platform for Computer (PC2CKM) | R1.01.00 – R2.03.00 | — | No fix listed | CNA |
- Dual-redundant Platform for Computer (PC2CKM) VendorYokogawa Electric Corporation Affected R1.01.00 – R2.03.00 Fixed in — No fix listed CNA
CPE names CISA-ADP · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:yokogawa:dual-redundant_platform_for_computer_\(pc2ckm\):*:*:*:*:*:*:*:* | — | — | Yokogawa Electric Corporation |
- cpe:2.3:a:yokogawa:dual-redundant_platform_for_computer_\(pc2ckm\):*:*:*:*:*:*:*:* Versions — — ·Yokogawa Electric Corporation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-8110
- 2026-10-03 Alias added: GHSA-q4q2-r8qr-qgwm
References
More Yokogawa Electric Corporation vulnerabilities
- TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0CRITICAL 9.0
- TI-2014-03162 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000… CVSS 2.0HIGH 8.3
- TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
- TI-2014-00730 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
- TI-2014-00727 Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow CVSS 2.0CRITICAL 9.3
- TI-2014-04257 BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50… CVSS 2.0HIGH 7.5
Sources
- CVE-2024-8110 · CVE Program
- CVE-2024-8110 · NVD
- FIRST EPSS
- GHSA-q4q2-r8qr-qgwm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences