Approved changes feed: RSS · Atom

cpe:2.3:o:yokogawa:centum_vp_entry_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorYokogawa (2f463e4a-4c93-5f61-82ea-07a016e0c34f)
ProductCentum Vp Entry Firmware (f75bf3c6-f0c3-5bff-92db-5a7ad3997820)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23402 vulnerable 2026-06-08 05:40:57.049078 Details available
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00
Published: 2022-03-11T09:10:53.000Z
Updated: 2024-08-03T03:43:45.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23401 vulnerable 2026-06-08 05:40:57.048407 Details available
The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:51.000Z
Updated: 2024-08-03T03:43:45.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22729 vulnerable 2026-06-08 05:40:55.126019 Details available
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:50.000Z
Updated: 2024-08-03T03:21:49.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22151 vulnerable 2026-06-08 05:40:06.058267 Details available
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:48.000Z
Updated: 2024-08-03T03:07:48.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22148 vulnerable 2026-06-08 05:40:06.049017 Details available
'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:47.000Z
Updated: 2024-08-03T03:07:49.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22145 vulnerable 2026-06-08 05:40:06.047867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22141 vulnerable 2026-06-08 05:40:06.046178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21808 vulnerable 2026-06-08 05:40:02.448313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21194 vulnerable 2026-06-08 05:39:59.977645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21177 vulnerable 2026-06-08 05:39:59.602788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5628 vulnerable 2026-06-08 05:06:50.599073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5627 vulnerable 2026-06-08 05:06:50.597536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5626 vulnerable 2026-06-08 05:06:50.586095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.