ICSA-22-174-02

icsaUScisa_csaf_ot

Yokogawa CAMS for HIS

view advisory published 2022-06-23

If a computer using CAMS for HIS software is compromised, it can be used to compromise any number of other computers using CAMS for HIS software with the potential to crash any affected software.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-30707UShigh8.8—
Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed (CENTUM CS 3000 and C…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationB/M9000 VP

    B/M9000CS and B/M9000 VP: These products are not directly affected by the vulnerability. However, these products are affected if CENTUM is installed on the same PC. If CENTUM is installed, update as described above. Also update B/M9000 to the latest version.

  • MitigationB/M9000CS

    B/M9000CS and B/M9000 VP: These products are not directly affected by the vulnerability. However, these products are affected if CENTUM is installed on the same PC. If CENTUM is installed, update as described above. Also update B/M9000 to the latest version.

  • MitigationCENTUM CS 3000 (including CENTUM CS 3000 Entry Class)

    B/M9000CS and B/M9000 VP: These products are not directly affected by the vulnerability. However, these products are affected if CENTUM is installed on the same PC. If CENTUM is installed, update as described above. Also update B/M9000 to the latest version.

  • MitigationCENTUM VP (Including CENTUM VP Entry Class)

    B/M9000CS and B/M9000 VP: These products are not directly affected by the vulnerability. However, these products are affected if CENTUM is installed on the same PC. If CENTUM is installed, update as described above. Also update B/M9000 to the latest version.

  • MitigationExaopc

    B/M9000CS and B/M9000 VP: These products are not directly affected by the vulnerability. However, these products are affected if CENTUM is installed on the same PC. If CENTUM is installed, update as described above. Also update B/M9000 to the latest version.

  • FixedB/M9000 VP

    Exaopc: Update systems to Version R3.80.00 and apply software patch R3.80.01

  • FixedB/M9000CS

    Exaopc: Update systems to Version R3.80.00 and apply software patch R3.80.01

  • FixedCENTUM CS 3000 (including CENTUM CS 3000 Entry Class)

    Exaopc: Update systems to Version R3.80.00 and apply software patch R3.80.01

  • FixedCENTUM VP (Including CENTUM VP Entry Class)

    Exaopc: Update systems to Version R3.80.00 and apply software patch R3.80.01

  • FixedExaopc

    Exaopc: Update systems to Version R3.80.00 and apply software patch R3.80.01

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan