CVE-2020-5608

🗓️ 05 Aug 2020 13:13:02Reported by jpcertType

CVE-2020-5608: CAMS for HIS CENTUM CS 3000, CENTUM VP, B/M9000CS, and B/M9000 VP allows remote unauthenticated attackers to bypass authentication

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2020-5608	5 Aug 202013:13	–	cvelist
EUVD	EUVD-2020-26769	7 Oct 202500:30	–	euvd
ICS	Yokogawa CENTUM (Update A)	11 Aug 202000:00	–	ics
NVD	CVE-2020-5608	5 Aug 202014:15	–	nvd
OSV	CVE-2020-5608	5 Aug 202014:15	–	osv
Tenable Nessus	Yokogawa Centum Improper Authentication	10 Aug 202100:00	–	nessus
Tenable Nessus	Yokogawa CENTUM Improper Authentication (CVE-2020-5608)	7 Feb 202200:00	–	nessus
Prion	Authentication flaw	5 Aug 202014:15	–	prion
RedhatCVE	CVE-2020-5608	22 May 202516:43	–	redhatcve

NVD

Node

yokogawa centum_cs_3000_firmwareRanger3.08.10–r3.09.50

AND

yokogawa centum_cs_3000Match-

Node

yokogawa centum_vp_firmwareRanger4.01.00–r4.03.00

yokogawa centum_vp_firmwareRanger5.01.00–r5.04.20

yokogawa centum_vp_firmwareRanger6.01.00–r6.07.00

AND

yokogawa centum_vpMatch-

Node

yokogawa b/m9000cs_firmwareRanger5.04.01–r5.05.01

AND

yokogawa b/m9000csMatch-

Node

yokogawa b/m9000vp_firmwareRanger6.01.01–r8.03.01

AND

yokogawa b/m9000vpMatch-

[
  {
    "product": "CAMS for HIS",
    "vendor": "Yokogawa Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU97997181/index.html
web-material3	www.web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf

21 Nov 2024 05:34Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.01674

CWE-287