Lucene search

[email protected]CVE-2022-33939

HistoryAug 16, 2022 - 8:15 a.m.

CVE-2022-33939

2022-08-1608:15:07

[email protected]

web.nvd.nist.gov

cve-2022-33939

centum vp

cs 3000

controller

fcs

denial of service

dos

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.6%

JSON

CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.

Affected configurations

NVD

Node

yokogawacentum_cs_3000_cp401Match-

AND

yokogawacentum_cs_3000_cp401_firmwareMatch-

Node

yokogawacentum_cs_3000_cp451Match-

AND

yokogawacentum_cs_3000_cp451_firmwareMatch-

Node

yokogawacentum_cs_3000_cp33Match-

AND

yokogawacentum_cs_3000_cp33_firmwareMatch-

Node

yokogawacentum_cs_3000_cp345Match-

AND

yokogawacentum_cs_3000_cp345_firmwareMatch-

Node

yokogawacentum_cs_3000_cp31Match-

AND

yokogawacentum_cs_3000_cp31_firmwareMatch-

Node

yokogawacentum_vp_3000_cp401Match-

AND

yokogawacentum_vp_3000_cp401_firmwareRanger4.01.00–r4.03.00

yokogawacentum_vp_3000_cp401_firmwareRanger5.01.00–r5.04.78

yokogawacentum_vp_3000_cp401_firmwareRanger6.01.00–r6.03.10

Node

yokogawacentum_vp_3000_cp451Match-

AND

yokogawacentum_vp_3000_cp451_firmwareRanger4.01.00–r4.03.00

yokogawacentum_vp_3000_cp451_firmwareRanger5.01.00–r5.04.78

yokogawacentum_vp_3000_cp451_firmwareRanger6.01.00–r6.03.10

CPENameOperatorVersion
yokogawa:centum_cs_3000_cp401_firmwareyokogawa centum cs 3000 cp401 firmwareeq-

CPE	Name	Operator	Version
yokogawa:centum_cs_3000_cp401_firmware	yokogawa centum cs 3000 cp401 firmware	eq	-

CNA Affected

[
  {
    "product": "CENTUM VP / CS 3000 controller FCS",
    "vendor": "Yokogawa Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "CP31, CP33, CP345, CP401, CP451"
      }
    ]
  }
]