Product:

Centum_cs_3000_firmware

(Yokogawa)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 15
Date Id Summary Products Score Patch Annotated
2022-03-11 CVE-2022-22145 CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00. Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc 8.1
2022-03-11 CVE-2022-22148 'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00. Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc 7.8
2022-03-11 CVE-2022-22151 CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00. Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc 8.1
2022-03-11 CVE-2022-22729 CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00. Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc 8.8
2022-03-11 CVE-2022-23401 The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00. Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc 7.8
2022-06-28 CVE-2022-30707 Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed (CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00), CENTUM series where CAMS function is used (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R4.01.00 to R4.03.00), CENTUM series regardless of the use of CAMS function (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R5.01.00 to R5.04.20 and R6.01.00 to R6.09.00), Exaopc... B\/m9000_vp, B\/m9000cs, Centum_cs_3000_entry_class_firmware, Centum_cs_3000_firmware, Centum_vp_entry_class_firmware, Centum_vp_firmware, Exaopc 8.8
2020-02-05 CVE-2015-5628 Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless... B\/m9000_vp_firmware, B\/m9000cs_firmware, Centum_cs_1000_firmware, Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc, Exapilot, Exaplog, Exaquantum, Exaquantum\/batch, Exarqe, Exasmoc, Field_wireless_device_opc_server, Fieldmate, Plant_resource_manager, Prosafe\-Rs_firmware, Scada_software_\(Fast\/tools\), Stardom_opc_server, Versatile_data_server_software N/A
2020-02-05 CVE-2015-5627 Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless... B\/m9000_vp_firmware, B\/m9000cs_firmware, Centum_cs_1000_firmware, Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc, Exapilot, Exaplog, Exaquantum, Exaquantum\/batch, Exarqe, Exasmoc, Field_wireless_device_opc_server, Fieldmate, Plant_resource_manager, Prosafe\-Rs_firmware, Scada_software_\(Fast\/tools\), Stardom_opc_server, Versatile_data_server_software N/A
2020-02-05 CVE-2015-5626 Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless... B\/m9000_vp_firmware, B\/m9000cs_firmware, Centum_cs_1000_firmware, Centum_cs_3000_entry_firmware, Centum_cs_3000_firmware, Centum_vp_entry_firmware, Centum_vp_firmware, Exaopc, Exapilot, Exaplog, Exaquantum, Exaquantum\/batch, Exarqe, Exasmoc, Field_wireless_device_opc_server, Fieldmate, Plant_resource_manager, Prosafe\-Rs_firmware, Scada_software_\(Fast\/tools\), Stardom_opc_server, Versatile_data_server_software N/A
2019-01-09 CVE-2018-16196 Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open... B\/m9000_vp, Centum_cs_3000_entry_class, Centum_cs_3000_firmware, Centum_vp_entry_class, Centum_vp_firmware, Exaopc, Fast\/tools, Plant_resource_manager, Prosafe\-Rs 7.5