Vulnerabilities

TI-2023-11727 CVE-2023-26593 · GHSA-hfx7-v8g3-wm7q

Cleartext storage of sensitive information in Yokogawa Electric Corporation CENTUM series

LOW 35

CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00136 Published 2023-04-11 No fix listed CWE-312

TI-2022-12843 CVE-2022-30707 · GHSA-7gxw-4vp5-4rw9

Violation of secure design principles exists in the communication of CAMS for HIS.

LOW 39

Violation of secure design principles exists in the communication of CAMS for HIS.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00594 Published 2022-06-28 No fix listed

TI-2022-10311 CVE-2022-27188 · GHSA-qhhf-33w5-r488

OS command injection in Yokogawa Electric Corporation CENTUM VP series with VP6E5150…

LOW 35

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker wh…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00479 Published 2022-04-15 No fix listed CWE-78

TI-2022-09520 CVE-2022-26034 · GHSA-6r8v-ww3c-grvh

Improper authentication in Yokogawa Electric Corporation CENTUM VP series with VP6E5000…

MEDIUM 41

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00981 Published 2022-04-15 No fix listed CWE-287

TI-2018-11593 CVE-2018-16196 · GHSA-r9jm-c64m-grf2

Improper input validation in Yokogawa Electric Corporation Multiple Yokogawa products…

LOW 39

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03342 Published 2019-01-09 No fix listed CWE-20

TI-2018-06380 CVE-2018-8838 · GHSA-4cv8-c362-f6hv

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions…

LOW 29

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small ver…

CVSS 3.0MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00288 Published 2018-04-17 No fix listed

TI-2014-03162 CVE-2014-3888 · GHSA-87c7-rqg4-7x74

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000…

HIGH 71

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.62312 Published 2014-07-10 No fix listed CWE-119

TI-2014-00728 CVE-2014-0782 · GHSA-fhrf-qc9p-xhrg

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

HIGH 69

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.56688 Published 2014-05-16 Fixed in R3.09.50 CWE-121

Vulnerabilities

Filters