Yokogawa CENTUM and Exaopc Use of Hard-Coded Credentials (CVE-2022-23402)

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00 This plugin only works with Tenable.ot. Please visit...

CVE-2022-23402

CVE-2022-23402 affects Yokogawa CENTUM VP (R5.01.00–R5.04.20; R6.01.00–R6.08.00) and Exaopc (R3.72.00–R3.79.00) where CAMS server applications hard-code a password. This can enable unauthorized access to files/shared memory, potentially disrupting alarms or compromising server functions. Mitigati...