Show filters
232 Total Results
Displaying 101-110 of 232
Sort by:
Attacker Value
Unknown
CVE-2022-22148
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
0
Attacker Value
Unknown
CVE-2022-22145
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
0
Attacker Value
Unknown
CVE-2022-22141
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
0
Attacker Value
Unknown
CVE-2022-21808
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
0
Attacker Value
Unknown
CVE-2022-21194
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Exaopc versions from R3.72.00 to R3.79.00.
0
Attacker Value
Unknown
CVE-2022-21177
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, andfrom R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
0
Attacker Value
Unknown
CVE-2021-22284
Disclosure Date: January 24, 2022 (last updated February 23, 2025)
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.
0
Attacker Value
Unknown
CVE-2021-40873
Disclosure Date: November 10, 2021 (last updated February 23, 2025)
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted.
0
Attacker Value
Unknown
CVE-2021-40871
Disclosure Date: November 10, 2021 (last updated February 23, 2025)
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted.
0
Attacker Value
Unknown
CVE-2021-40142
Disclosure Date: August 27, 2021 (last updated February 23, 2025)
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.
0
