Yokogawa CENTUM and Exaopc Use of Hard-Coded Credentials (CVE-2022-21194)

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Exaopc versions from R3.72.00 to R3.79.00. This plugin only works with...

CVE-2022-21194

creationtimestamp| type| source ---|---|--- 2022-03-11 12:14:35+00:00| seen| https://t.me/cibsecurity/38764...

CVE-2022-21194

The CVE-2022-21194 issue affects Yokogawa CENTUM VP and Exaopc: if the OS accounts created during installation retain their default passwords, an attacker could access the system. Affected are CENTUM VP (R5.01.00–R5.04.20, R6.01.00–R6.08.00) and Exaopc (R3.72.00–R3.79.00). Root cause (per the sou...