HIGH
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00
Published Mar 11, 2022
8.1
HIGHCVSS 3.1
EPSS 0.94%
Description
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Affected products
-
- Version versions from R3.08.10 to R3.09.00StatusaffectedConstraints-
- Version
-
- Version versions from R4.01.00 to R4.03.00StatusaffectedConstraints-
- Version versions from R5.01.00 to R5.04.20StatusaffectedConstraints-
- Version versions from R6.01.00 to R6.08.00StatusaffectedConstraints-
- Version
-
- Version versions from R3.72.00 to R3.79.00StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Yokogawa Electric Corporation | Centum CS 3000 | n/a |
| ||||||||||||
| Yokogawa Electric Corporation | Centum VP | n/a |
| ||||||||||||
| Yokogawa Electric Corporation | Exaopc | n/a |
|
Configuration 1
AND
- ≥ r3.08.10 · ≤ r3.09.00
Running on/with
- n/a
Configuration 2
AND
- ≥ r3.08.10 · ≤ r3.09.00
Running on/with
- n/a
Configuration 3
AND
OR
- ≥ r4.01.00 · ≤ r4.03.00
- ≥ r5.01.00 · ≤ r5.04.20
- ≥ r6.01.00 · < r6.09.00
Configuration 4
AND
OR
- ≥ r4.01.00 · ≤ r4.03.00
- ≥ r5.01.00 · ≤ r5.04.20
- ≥ r6.01.00 · < r6.09.00
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-26418 Advisory
- https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-26418 | Advisory | |
| https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner jpcert
Published Mar 11, 2022
Updated Aug 3, 2024
Reserved Feb 3, 2022
Link CVE-2022-21177
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2022-26418 Assigner jpcert
Published Mar 11, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-26418