ICSA-22-083-01

icsaUScisa_csaf_ot

Yokogawa CENTUM and Exaopc

Advisory ansehen veröffentlicht 2022-03-24

Successful exploitation of these vulnerabilities in CAMS server functions can be abused to suppress alarms, read or write files, crash the server, or execute arbitrary code.

01

beschreibt (7)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-23402UScritical9.8OT erhöht—
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, E…
CVE-2022-22729UShigh8.8—
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets…
CVE-2022-22151UShigh8.1—
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP…
CVE-2022-22145UShigh8.1—
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from R3.08.10 to R3.09.00,…
CVE-2022-21808UShigh8.8—
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versi…
CVE-2022-21194UScritical9.8OT erhöht—
The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 a…
CVE-2022-21177UShigh8.1—
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (35)

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000 VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationB/M9000CS

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM CS 3000

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationCENTUM VP

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

  • MitigationExaopc

    CENTUM CS 3000: consider system upgrade to the latest revision of CENTUM VP

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan