CVE-2023-26593

>= r1.01.00 and <= r1.20.00

CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attack

7.8HIGH

CVE-2022-30707

>= r3.72.00 and <= r3.80.00

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM serie

8.8HIGH

CVE-2022-23402

>= r3.72.00 and < r3.80.00

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to

9.8CRITICAL

CVE-2022-23401

>= r3.72.00 and < r3.80.00

The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, C

7.8HIGH

CVE-2022-22729

>= r3.72.00 and < r3.80.00

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authe

8.8HIGH

CVE-2022-22151

>= r3.72.00 and < r3.80.00

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS

8.1HIGH

CVE-2022-22148

>= r3.72.00 and < r3.80.00

'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configura

7.8HIGH

CVE-2022-22145

>= r3.72.00 and < r3.80.00

CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption.

8.1HIGH

CVE-2022-22141

>= r3.72.00 and < r3.80.00

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with impo

7.8HIGH

CVE-2022-21808

>= r3.72.00 and < r3.80.00

Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 v

8.8HIGH

CVE-2022-21194

>= r3.72.00 and < r3.80.00

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configurati

9.8CRITICAL

CVE-2022-21177

>= r3.72.00 and < r3.80.00

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM C

8.1HIGH

CVE-2015-5628

<= r3.72.00

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 E

9.8CRITICAL

CVE-2015-5627

<= r3.72.00

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 E

9.8CRITICAL

CVE-2015-5626

<= r3.72.00

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 E

9.8CRITICAL

CVE-2019-6008

>= r1.01.00 and <= r3.77.00

An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ?

7.8HIGH

CVE-2018-16196

>= r3.10.00 and <= r3.75.00

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Ent

7.5HIGH

CVE-2018-8838

<= r3.75.00

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small v

6.5MEDIUM

CVE-2014-5208

<= 3.71.10

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x

CVE-2014-3888

<= 3.72.00

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20

CVE-2014-0782

<= 3.71.02

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Ent