Approved changes feed: RSS · Atom

cpe:2.3:a:yokogawa_electric_corporation:centum_cs_3000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYokogawa Electric Corporation (10a78483-1734-5175-a349-0d9bf91589eb)
ProductCentum Cs 3000 (c848ff85-2cb5-5bfc-90a9-a98a042b1437)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5650 vulnerable 2026-06-03 14:57:53.635493 Details available
HIGH (8.5)
DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.
Published: 2024-06-17T06:21:31.387Z
Updated: 2024-08-01T21:18:06.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23401 vulnerable 2026-06-03 14:46:27.070750 Details available
The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:51.000Z
Updated: 2024-08-03T03:43:45.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22729 vulnerable 2026-06-03 14:46:25.293524 Details available
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:50.000Z
Updated: 2024-08-03T03:21:49.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22151 vulnerable 2026-06-03 14:46:16.838565 Details available
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:48.000Z
Updated: 2024-08-03T03:07:48.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22148 vulnerable 2026-06-03 14:46:16.830168 Details available
'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:47.000Z
Updated: 2024-08-03T03:07:49.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22145 vulnerable 2026-06-03 14:46:16.829262 Details available
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:45.000Z
Updated: 2024-08-03T03:07:48.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22141 vulnerable 2026-06-03 14:46:16.827580 Details available
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:44.000Z
Updated: 2024-08-03T03:07:48.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21808 vulnerable 2026-06-03 14:46:13.787870 Details available
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:42.000Z
Updated: 2024-08-03T02:53:36.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21177 vulnerable 2026-06-03 14:46:11.378357 Details available
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Published: 2022-03-11T09:10:39.000Z
Updated: 2024-08-03T02:31:59.257Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.