yokogawa Vulnerability Advisory Catalog

Total 63 security vulnerabilities recorded for yokogawa software and firmware.

← Back to All Vendors
Component: stardom_fcj_firmware

Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an ad...

📅 2022-06-28
CVSS 7.2 Dossier →
Component: centum_cs_3000_firmware

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is i...

📅 2022-06-28
CVSS 8.8 Dossier →
Component: stardom_fcj_firmware

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an a...

📅 2022-06-28
CVSS 7.5 Dossier →
Component: b\/m9000_vp

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.0...

📅 2022-04-15
CVSS 7.8 Dossier →
CVE-2022-26034 CRITICAL
Component: b\/m9000_vp

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTU...

📅 2022-04-15
CVSS 9.1 Dossier →
Component: widefield3

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file....

📅 2022-03-18
CVSS 2.8 Dossier →
CVE-2022-23402 CRITICAL
Component: centum_vp_firmware

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and version...

📅 2022-03-11
CVSS 9.8 Dossier →
Component: centum_cs_3000_firmware

The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions fr...

📅 2022-03-11
CVSS 7.8 Dossier →
Component: centum_cs_3000_firmware

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be byp...

📅 2022-03-11
CVSS 8.8 Dossier →
Component: centum_cs_3000_firmware

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R...

📅 2022-03-11
CVSS 8.1 Dossier →
Component: centum_cs_3000_firmware

'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000...

📅 2022-03-11
CVSS 7.8 Dossier →
Component: centum_cs_3000_firmware

CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versi...

📅 2022-03-11
CVSS 8.1 Dossier →
Component: centum_cs_3000_firmware

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configurati...

📅 2022-03-11
CVSS 7.8 Dossier →
Component: centum_cs_3000_firmware

Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.1...

📅 2022-03-11
CVSS 8.8 Dossier →
CVE-2022-21194 CRITICAL
Component: centum_vp_firmware

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versio...

📅 2022-03-11
CVSS 9.8 Dossier →
Component: centum_cs_3000_firmware

There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from...

📅 2022-03-11
CVSS 8.1 Dossier →
CVE-2020-5609 CRITICAL
Component: centum_cs_3000_firmware

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP S...

📅 2020-08-05
CVSS 9.8 Dossier →
CVE-2020-5608 CRITICAL
Component: centum_cs_3000_firmware

CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/...

📅 2020-08-05
CVSS 9.8 Dossier →
CVE-2015-5628 CRITICAL
Component: centum_cs_1000_firmware

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and ea...

📅 2020-02-05
CVSS 9.8 Dossier →
CVE-2015-5627 CRITICAL
Component: centum_cs_1000_firmware

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and ea...

📅 2020-02-05
CVSS 9.8 Dossier →
CVE-2015-5626 CRITICAL
Component: centum_cs_1000_firmware

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and ea...

📅 2020-02-05
CVSS 9.8 Dossier →
Component: exaopc

An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquant...

📅 2019-12-26
CVSS 7.8 Dossier →
CVE-2019-5909 CRITICAL
Component: b\/m_9000_vp

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4....

📅 2019-02-13
CVSS 9.8 Dossier →
Component: centum_cs_3000_firmware

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - ...

📅 2019-01-09
CVSS 7.5 Dossier →
Page 2 of 3 (63 Total Records)