多款Yokogawa产品安全漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa Japan. A security vulnerability exists in several Yokogawa products, which stems from an elevation of privilege vulnerability discovered in CENTUM Authentication Mode. The following products and versions are affected: CENTUM CS 1000,...

CVE-2022-22148

'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc...

CVE-2022-22151

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions fr...

CVE-2022-22141

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 t...

Yokogawa Exaopc 路径遍历漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa Japan. A path traversal vulnerability exists in CAMS for HIS Server in Yokogawa Electric. The following products and versions are affected: CENTUM CS 3000 version R3.08.10 through R3.09.00, CENTUM VP version R4.01.00 through R4.03.00,...