Centum Cs 3000 Entry Firmware vulnerabilities

8 known vulnerabilities in Centum Cs 3000 Entry Firmware from Yokogawa. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  CENTUM CS 3000: Uncontrolled Search Path Element

  CVE-2022-23401Mar 11, 2022Yokogawa Electric

  The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.

• 8.8 High severity

  CENTUM CS 3000: Improper Authentication

  CVE-2022-22729Mar 11, 2022Yokogawa Electric

  CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.

• 8.1 High severity

  CENTUM CS 3000: Improper Encoding or Escaping of Output

  CVE-2022-22151Mar 11, 2022Yokogawa Electric

  CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.0

• 7.8 High severity

  CENTUM CS 3000: Incorrect Permission Assignment for Critical Resource

  CVE-2022-22148Mar 11, 2022Yokogawa Electric

  'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20,

• 8.1 High severity

  CENTUM CS 3000: Uncontrolled Resource Consumption

  CVE-2022-22145Mar 11, 2022Yokogawa Electric

  CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, from R

• 7.8 High severity

  CENTUM CS 3000: Improper Privilege Management

  CVE-2022-22141Mar 11, 2022Yokogawa Electric

  'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.0

• 8.8 High severity

  CENTUM CS 3000: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-21808Mar 11, 2022Yokogawa ElectricEPSS 1.06%

  Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R

• 8.1 High severity

  CENTUM CS 3000: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-21177Mar 11, 2022Yokogawa Electric

  There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.