Privilege escalation

CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM manag...

CVE-2023-26593

CENTUM series (Yokogawa) are affected by CVE-2023-26593 due to cleartext storage of passwords, enabling local privilege escalation if an attacker with valid credentials tampered with the password file. Affected products/versions include CENTUM CS 1000, CENTUM CS 3000 (R2.01.00–R3.09.50), CENTUM V...

CVE-2023-26593

CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM manag...

CVE-2023-26593

CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM manag...

Yokogawa Electric CENTUM series vulnerable to cleartext storage of sensitive information

Overview CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information CWE-312, CVE-2023-26593. Yokogawa Electric Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact If an attacker who can...

The vulnerabilities of distributed control systems such as CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class, B/M9000CS, B/M9000 VP, and the OPC-server Exaopc are related to the unencrypted storage of account data. This allows attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of distributed control systems such as CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class, B/M9000CS, B/M9000 VP, and the OPC-server Exaopc are related to unencrypted storage of account data. Exploiting these vulnerabilities can...

多款Yokogawa产品安全漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa Japan. A security vulnerability exists in several Yokogawa products, which stems from an elevation of privilege vulnerability discovered in CENTUM Authentication Mode. The following products and versions are affected: CENTUM CS 1000,...

Yokogawa CENTUM Controller FCS Resource Management Errors (CVE-2022-33939)

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

The vulnerabilities of distributed control systems such as CENTUM CS 3000, CENTUM VP, B/M9000 VP, B/M9000CS, and the OPC-server Exaopc are related to violations of secure design principles. These vulnerabilities allow attackers to access protected information or cause service failures.

The vulnerabilities of distributed control systems such as CENTUM CS 3000, CENTUM VP, B/M9000 VP, B/M9000CS, and OPC-servers from Exaopc are related to violations of secure design principles. Exploitation of these vulnerabilities can allow attackers to access protected information or cause servic...

Vulnerability fixed in Yokogawa Centum controller FCS products

Yokogawa has fixed a vulnerability in Centum controller FCS products. A malicious party could potentially exploit it to cause a denial-of-service. To exploit the vulnerability, the malicious party needs access to the production infrastructure. It is good practice not to have such infrastructure...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

CVE-2022-33939

CVE-2022-33939 affects Yokogawa CENTUM VP/CS 3000 controller FCS (CP31/CP33/CP345/CP401/CP451). The vulnerability arises in processing ADL/communication packets, enabling resource consumption that can lead to a DoS condition on ADL communications when a specially crafted packet is sent. Public de...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

Yokogawa CENTUM Controller FCS

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Yokogawa Equipment: CENTUM VP & CS 3000 Controller FCS Vulnerability: Denial of Service 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the affected device, resulting in a...

Yokogawa Electric CENTUM VP / CS 3000 controller FCS 资源管理错误漏洞

The Yokogawa Electric CENTUM VP / CS 3000 controller FCS is a series of sophisticated, high-performance controllers from Yokogawa Electric Corporation Japan. A resource management error vulnerability exists in Yokogawa Electric Corporation's CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345,...

The vulnerability of distributed control systems such as CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class lies in resource management errors, which can be exploited by attackers to cause service interruptions.

The vulnerability of distributed control systems such as CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class lies in resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted malware...

PT-2022-3911 · Yokogawa · Centum Vp +4

Name of the Vulnerable Software and Affected Versions: CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 CENTUM CS 3000 CENTUM CS 3000 Entry Class CENTUM VP CENTUM VP Entry Class Description: The issue is related to errors in resource management, which may lead to resource...

The vulnerability of the Standard Operation and Monitoring function in distributed control systems such as CENTUM VP and CENTUM VP Entry Class allows attackers to execute arbitrary commands.

The vulnerability of the Standard Operation and Monitoring function in distributed control systems such as CENTUM VP and CENTUM VP Entry Class exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow...