CVE-2022-23402 The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from....
CriticalCVSS 9.8
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Yokogawa Electric Corporation CENTUM VP | = versions from R5.01.00 to R5.04.20 | No fix listed |
| Yokogawa Electric Corporation CENTUM VP | = versions from R6.01.00 to R6.08.00 | No fix listed |
| Yokogawa Electric Corporation Exaopc | = versions from R3.72.00 to R3.79.00 | No fix listed |
| yokogawa centum vp firmware | >= r5.01.00, <= r5.04.20 | No fix listed |
| yokogawa centum vp firmware | >= r6.01.00, < r6.09.00 | r6.09.00 |
| yokogawa centum vp entry firmware | >= r5.01.00, <= r5.04.20 | No fix listed |
| yokogawa centum vp entry firmware | >= r6.01.00, < r6.09.00 | r6.09.00 |
| yokogawa exaopc | >= r3.72.00, < r3.80.00 | r3.80.00 |
References
- web-material3.yokogawa.com vendor-advisory