Vulnerabilities > Yokogawa > High

DATE CVE VULNERABILITY TITLE RISK
2023-04-11 CVE-2023-26593 Cleartext Storage of Sensitive Information vulnerability in Yokogawa products
CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information.
local
low complexity
yokogawa CWE-312
7.8
2022-08-16 CVE-2022-33939 Unspecified vulnerability in Yokogawa products
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption.
network
low complexity
yokogawa
7.5
2022-07-04 CVE-2022-32284 Use of Insufficiently Random Values vulnerability in Yokogawa Aw810D Firmware R12
Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a remote attacker to cause denial-of-service (DoS) condition by sending a specially crafted packet.
network
low complexity
yokogawa CWE-330
7.5
2022-06-28 CVE-2022-29519 Cleartext Transmission of Sensitive Information vulnerability in Yokogawa Stardom FCJ Firmware and Stardom FCN Firmware
Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware.
high complexity
yokogawa CWE-319
7.5
2022-06-28 CVE-2022-30707 Unspecified vulnerability in Yokogawa products
Violation of secure design principles exists in the communication of CAMS for HIS.
low complexity
yokogawa
8.8
2022-06-28 CVE-2022-30997 Use of Hard-coded Credentials vulnerability in Yokogawa Stardom FCJ Firmware and Stardom FCN Firmware
Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read/change configuration settings or update the controller with tampered firmware.
network
low complexity
yokogawa CWE-798
7.2
2022-04-15 CVE-2022-27188 OS Command Injection vulnerability in Yokogawa B/M9000 VP and Centum VP
OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.
local
low complexity
yokogawa CWE-78
7.8
2022-03-11 CVE-2022-21177 Path Traversal vulnerability in Yokogawa products
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
network
low complexity
yokogawa CWE-22
8.1
2022-03-11 CVE-2022-21808 Path Traversal vulnerability in Yokogawa products
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
network
low complexity
yokogawa CWE-22
8.8
2022-03-11 CVE-2022-22141 Improper Privilege Management vulnerability in Yokogawa products
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration.
local
low complexity
yokogawa CWE-269
7.8