Lucene search
K

CVE-2022-30707

🗓️ 28 Jun 2022 10:05:59Reported by jpcertType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 69 Views

Violation of secure design principles in CAMS for HIS communication in CENTUM series, CENTUM VP, CENTUM VP Small, CENTUM VP Basic, Exaopc, B/M9000 CS, and B/M9000 VP can lead to adjacent attacker compromising and accessing data

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-30707
28 Jun 202213:15
attackerkb
Circl
CVE-2022-30707
29 Jun 202204:42
circl
CNNVD
Yokogawa Exaopc 安全漏洞
23 Jun 202200:00
cnnvd
Cvelist
CVE-2022-30707
28 Jun 202210:05
cvelist
EUVD
EUVD-2022-52537
3 Oct 202520:07
euvd
ICS
Yokogawa CAMS for HIS
23 Jun 202200:00
ics
NVD
CVE-2022-30707
28 Jun 202213:15
nvd
OSV
CVE-2022-30707
28 Jun 202213:15
osv
Prion
Information disclosure
28 Jun 202213:15
prion
Positive Technologies
PT-2022-4220 · Yokogawa · Exaopc +5
28 Jun 202200:00
ptsecurity
Rows per page
NVD
Node
Node
yokogawacentum_vp_firmwareRanger4.01.00r4.03.00
OR
yokogawacentum_vp_firmwareRanger5.01.00r5.04.20
OR
yokogawacentum_vp_firmwareRanger6.01.00r6.09.00
AND
Node
yokogawaexaopcRanger3.72.00r3.80.00
Node
yokogawab/m9000_vpRanger6.01.01r8.03.01
OR
yokogawab/m9000csRanger5.04.01r5.05.01
[
  {
    "product": "CAMS for HIS",
    "vendor": "Yokogawa Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "CENTUM series where LHS4800 is installed (CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00), CENTUM series where CAMS function is used (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R4.01.00 to R4.03.00), CENTUM series regardless of the use of CAMS function (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R5.01.00 to R5.04.20 and R6.01.00 to R6.09.00), Exaopc R3.72.00 to R3.80.00 (only if NTPF100-S6 'For CENTUM VP Support CAMS for HIS' is installed), B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:03Current
8.5High risk
Vulners AI Score8.5
CVSS 25.4
CVSS 3.18.8
EPSS0.00717
69