CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HYokogawa Centum Cs 3000
HWYokogawawszystkie wersjeYokogawa Centum Cs 3000 Entry
HWYokogawawszystkie wersjeYokogawa Centum Cs 3000 Entry Firmware
OSYokogawar3.08.10 – r3.09.00Yokogawa Centum Cs 3000 Firmware
OSYokogawar3.08.10 – r3.09.00Yokogawa Centum Vp
HWYokogawawszystkie wersjeYokogawa Centum Vp Entry
HWYokogawawszystkie wersjeYokogawa Centum Vp Entry Firmware
OSYokogawar4.01.00 – r4.03.00r6.01.00 – r6.09.00 (bez)r5.01.00 – r5.04.20Yokogawa Centum Vp Firmware
OSYokogawar6.01.00 – r6.09.00 (bez)r4.01.00 – r4.03.00r5.01.00 – r5.04.20Yokogawa Exaopc
APPYokogawar3.72.00 – r3.80.00 (bez)
Powiązane podatności
Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server ...
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versio...
The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the...
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R...
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM V...