CVE-2022-22729CWE-302

CVE-2022-22729: vulnerability in Yokogawa Electric Corporation CENTUM CS 3000

Published · Updated

Follow this CVE+ Monitor CENTUM VP+ Monitor Exaopc

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
Affected products
Yokogawa Electric Corporation · CENTUM CS 3000Yokogawa Electric Corporation · CENTUM VPYokogawa Electric Corporation · Exaopc
Related CVEs — Yokogawa Electric Corporation CENTUM CS 3000

In the same product, most dangerous first.

CVE-2022-21808—CVE-2022-21808EPSS 1.1%CVE-2022-23402—CVE-2022-23402EPSS 1.0%CVE-2022-21194—CVE-2022-21194EPSS 1.0%CVE-2022-21177—CVE-2022-21177EPSS 0.9%CVE-2022-22151—CVE-2022-22151EPSS 0.8%CVE-2022-22145—CVE-2022-22145EPSS 0.8%