CVE-2022-21808
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2022-03-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-22, CWE-23
Affected products
- Centum Cs 3000 Entry Firmware (Yokogawa)
- Centum Cs 3000 Firmware (Yokogawa)
- Centum Vp Entry Firmware (Yokogawa)
- Centum Vp Firmware (Yokogawa)
- Exaopc (Yokogawa)
- Centum Cs 3000 (Yokogawa Electric Corporation)
- Centum Vp (Yokogawa Electric Corporation)
- Exaopc (Yokogawa Electric Corporation)
References
- https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf
