Yokogawa Centum Vp Entry Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Yokogawa Centum Vp Entry Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2015-5626 — CVSS 9.8 (critical): Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry…
• CVE-2015-5627 — CVSS 9.8 (critical): Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry…
• CVE-2015-5628 — CVSS 9.8 (critical): Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry…
• CVE-2022-21194 — CVSS 9.8 (critical): The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration…
• CVE-2022-23402 — CVSS 9.8 (critical): The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20…
• CVE-2022-22729 — CVSS 8.8 (high): CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication…
• CVE-2022-21808 — CVSS 8.8 (high): Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions…
• CVE-2022-22151 — CVSS 8.1 (high): CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000…
• CVE-2022-22145 — CVSS 8.1 (high): CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS…
• CVE-2022-21177 — CVSS 8.1 (high): There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000…
• CVE-2022-22141 — CVSS 7.8 (high): 'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL…
• CVE-2022-23401 — CVSS 7.8 (high): The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP…
• CVE-2022-22148 — CVSS 7.8 (high): 'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration…