CVE-2022-30707

>= r4.01.00 and <= r4.03.00

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM serie

8.8HIGH

CVE-2022-23402

>= r5.01.00 and <= r5.04.20

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to

9.8CRITICAL

CVE-2022-23401

>= r4.01.00 and <= r4.03.00

The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, C

7.8HIGH

CVE-2022-22729

>= r4.01.00 and <= r4.03.00

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authe

8.8HIGH

CVE-2022-22151

>= r4.01.00 and <= r4.03.00

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS

8.1HIGH

CVE-2022-22148

>= r4.01.00 and <= r4.03.00

'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configura

7.8HIGH

CVE-2022-22145

>= r4.01.00 and <= r4.03.00

CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption.

8.1HIGH

CVE-2022-22141

>= r4.01.00 and <= r4.03.00

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with impo

7.8HIGH

CVE-2022-21808

>= r4.01.00 and <= r4.03.00

Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 v

8.8HIGH

CVE-2022-21194

>= r5.01.00 and <= r5.04.20

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configurati

9.8CRITICAL

CVE-2022-21177

>= r4.01.00 and <= r4.03.00

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM C

8.1HIGH

CVE-2020-5609

>= r4.01.00 and <= r4.03.00

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (

9.8CRITICAL

CVE-2020-5608

>= r4.01.00 and <= r4.03.00

CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.0

9.8CRITICAL

CVE-2015-5628

<= r5.04.20

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 E

9.8CRITICAL

CVE-2015-5627

<= r5.04.20

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 E

9.8CRITICAL

CVE-2015-5626

<= r5.04.20

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 E

9.8CRITICAL

CVE-2018-16196

>= r4.01.00 and <= r6.03.10

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Ent

7.5HIGH