CVE-2020-5609

🗓️ 05 Aug 2020 13:12:59Reported by jpcertType

Directory traversal vulnerability affects multiple CENTUM systems allowing file manipulation by attackers.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2020-5609	5 Aug 202013:12	–	cvelist
EUVD	EUVD-2020-26770	7 Oct 202500:30	–	euvd
NVD	CVE-2020-5609	5 Aug 202014:15	–	nvd
Tenable Nessus	Yokogawa Centum Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	10 Aug 202100:00	–	nessus
Tenable Nessus	Yokogawa CENTUM Improper Limitation of a Pathname to a Restricted Directory (CVE-2020-5609)	7 Feb 202200:00	–	nessus
Prion	Directory traversal	5 Aug 202014:15	–	prion
RedhatCVE	CVE-2020-5609	22 May 202517:41	–	redhatcve

NVD

Node

yokogawa centum_cs_3000_firmwareRanger3.08.10–r3.09.50

AND

yokogawa centum_cs_3000Match-

Node

yokogawa centum_vp_firmwareRanger4.01.00–r4.03.00

yokogawa centum_vp_firmwareRanger5.01.00–r5.04.20

yokogawa centum_vp_firmwareRanger6.01.00–r6.07.00

AND

yokogawa centum_vpMatch-

Node

yokogawa b/m9000cs_firmwareRanger5.04.01–r5.05.01

AND

yokogawa b/m9000csMatch-

Node

yokogawa b/m9000vp_firmwareRanger6.01.01–r8.03.01

AND

yokogawa b/m9000vpMatch-

[
  {
    "product": "CAMS for HIS",
    "vendor": "Yokogawa Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/vu/JVNVU97997181/index.html
web-material3	www.web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf

21 Nov 2024 05:34Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.04514

CWE-22