Browse CVEs

CRITICAL 9.8 CVE-2022-21194 The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versi… Centum Vp Firmware Mitigation only Fix from $2,3002022-03-11 CRITICAL 9.8 CVE-2022-23402 The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versio… Centum Vp Firmware Mitigation only Fix from $2,3002022-03-11 HIGH 8.8 CVE-2022-21808 Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 8.8 CVE-2022-22729 CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be by… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 8.1 CVE-2022-21177 There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions fro… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 8.1 CVE-2022-22145 CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 vers… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 8.1 CVE-2022-22151 CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from … Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-22141 'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configurat… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-22148 'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 300… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-23401 The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions f… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502022-03-11 CRITICAL 9.8 CVE-2020-5608 CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B… Centum Cs 3000 Firmware Mitigation only Fix from $2,3002020-08-05 CRITICAL 9.8 CVE-2020-5609 Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP … Centum Cs 3000 Firmware Mitigation only Fix from $2,3002020-08-05 CRITICAL 9.8 CVE-2015-5626 Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and e… Centum Cs 1000 Firmware Mitigation only Fix from $2,3002020-02-05 CRITICAL 9.8 CVE-2015-5627 Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and e… Centum Cs 1000 Firmware Mitigation only Fix from $2,3002020-02-05 CRITICAL 9.8 CVE-2015-5628EPSS 7% Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and e… Centum Cs 1000 Firmware Mitigation only Fix from $2,3002020-02-05 HIGH 7.8 CVE-2019-6008 An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquan… Exaopc Mitigation only Fix from $1,9502019-12-26 CRITICAL 9.8 CVE-2019-5909EPSS 5% License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4… B\/m 9000 Vp Mitigation only Fix from $2,3002019-02-13 HIGH 7.5 CVE-2018-16196 Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 -… Centum Cs 3000 Firmware Mitigation only Fix from $1,9502019-01-09 CRITICAL 9.8 CVE-2018-0651 Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, S… Idefine For Prosafe Rs Firmware Mitigation only Fix from $2,3002019-01-09 CRITICAL 9.8 CVE-2018-17900 Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which … Fcj Firmware Mitigation only Fix from $2,3002018-10-12 HIGH 7.5 CVE-2018-17898 Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhausti… Fcj Firmware Mitigation only Fix from $1,9502018-10-12 MEDIUM 5.3 CVE-2018-17902 Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session manag… Fcj Firmware Mitigation only Fix from $1,6002018-10-12 HIGH 8.1 CVE-2018-17896 Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials wh… Fcj Firmware Mitigation only Fix from $1,9502018-10-12 CRITICAL 9.8 CVE-2018-10592EPSS 7% Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R… Fcj Firmware Mitigation only Fix from $2,3002018-07-31 MEDIUM 6.5 CVE-2018-8838 A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 an… B\/m9000 Cs Mitigation only Fix from $1,6002018-04-17 HIGH 7.3 CVE-2016-4860 Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers… Stardom Fcn\/fcj Mitigation only Fix from $1,9502016-09-19 HIGH 7.5 CVE-2014-5208EPSS 23% BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, a… Exaopc after 3.71.10 Fix from $1,9502014-12-22 HIGH 8.3 CVE-2014-3888EPSS 62% Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaop… Exaopc after 7.03.01 Fix from $1,9502014-07-10 HIGH 8.3 CVE-2014-0782EPSS 57% Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 a… B\/m9000cs Software after 5.05.01 Fix from $1,9502014-05-16 HIGH 9.3 CVE-2014-0781EPSS 25% Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via cra… Centum Cs 3000 No fix yet Fix from $1,9502014-03-14