CVE-2022-22151
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
- Score
- CVSS 3.1 8.1 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2022-03-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-116, CWE-117
Affected products
- Centum Cs 3000 Entry Firmware (Yokogawa)
- Centum Cs 3000 Firmware (Yokogawa)
- Centum Vp Entry Firmware (Yokogawa)
- Centum Vp Firmware (Yokogawa)
- Exaopc (Yokogawa)
- Centum Cs 3000 (Yokogawa Electric Corporation)
- Centum Vp (Yokogawa Electric Corporation)
- Exaopc (Yokogawa Electric Corporation)
References
- https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf
