CVE-2022-22141
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2022-03-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-269, CWE-732
Affected products
- Centum Cs 3000 Entry Firmware (Yokogawa)
- Centum Cs 3000 Firmware (Yokogawa)
- Centum Vp Entry Firmware (Yokogawa)
- Centum Vp Firmware (Yokogawa)
- Exaopc (Yokogawa)
- Centum Cs 3000 (Yokogawa Electric Corporation)
- Centum Vp (Yokogawa Electric Corporation)
- Exaopc (Yokogawa Electric Corporation)
References
- https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf
