Login Request a demo
Critical severity · published Aug 5, 2020
CVE-2020-5609
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to…
9.8
CVSS
2.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
B/m9000cs Firmware · Yokogawa
r5.04.01 through r5.05.01 · source: NVD
BF
B/m9000vp Firmware · Yokogawa
r6.01.01 through r8.03.01 · source: NVD
CC
Centum CS 3000 Firmware · Yokogawa
r3.08.10 through r3.09.50 · source: NVD
CV
Centum VP Firmware · Yokogawa
r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 through r6.07.00 · source: NVD
Affected product
BF
B/m9000cs Firmware
Yokogawa
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-5609
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-5609
Third Party Advisory
https://jvn.jp/vu/JVNVU97997181/index.html
Vendor Advisory
https://web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf
More from B/m9000cs Firmware
9.8
CVE-2020-5608
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01,…
9.8
CVE-2015-5628
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
9.8
CVE-2015-5627
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
9.8
CVE-2015-5626
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…