Login Request a demo
CV
Product
Centum VP Firmware
by Yokogawa · last CVE Jun 28, 2022
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 7High 10Medium 0Low 0
Severity
All severities17Critical7High10Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Centum VP Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23402
9.8
1%
Mar 11
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00,…
Affected: r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-21194
9.8
1%
Mar 11
The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20…
Affected: r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2020-5609
9.8
2%
Aug 5
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to…
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 through r6.07.00
CVE-2020-5608
9.8
2%
Aug 5
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01,…
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 through r6.07.00
CVE-2015-5628
9.8
7%
Feb 5
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
Affected: through r5.04.20
CVE-2015-5627
9.8
4%
Feb 5
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
Affected: through r5.04.20
CVE-2015-5626
9.8
4%
Feb 5
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
Affected: through r5.04.20
CVE-2022-30707
8.8
1%
Jun 28
Violation of secure design principles exists in the communication of CAMS for HIS
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 through r6.09.00
CVE-2022-22729
8.8
1%
Mar 11
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-21808
8.8
1%
Mar 11
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP…
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-22151
8.1
1%
Mar 11
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM…
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-22145
8.1
1%
Mar 11
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-21177
8.1
1%
Mar 11
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM…
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-23401
7.8
0%
Mar 11
The following Yokogawa Electric products contain insecure DLL loading issues
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-22148
7.8
0%
Mar 11
'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2022-22141
7.8
0%
Mar 11
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration
Affected: r4.01.00 through r4.03.00; r5.01.00 through r5.04.20; r6.01.00 before r6.09.00
CVE-2018-16196
7.5
3%
Jan 9
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00…
Affected: r4.01.00 through r6.03.10
Showing 17