CRITICAL🇵🇱 Wersja polska

CVE-2015-5626

CVSS 9.8v3.1pub. 2020-02-05upd. 2024-11-21

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (network-communications outage) via a crafted packet.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Yokogawa B\/m9000cs

    HW
    Yokogawa
    all versions
  • Yokogawa B\/m9000cs Firmware

    OS
    Yokogawa
    ≤ r5.05.01
  • Yokogawa B\/m9000 Vp

    HW
    Yokogawa
    all versions
  • Yokogawa B\/m9000 Vp Firmware

    OS
    Yokogawa
    ≤ r7.03.04
  • Yokogawa Centum Cs 1000

    HW
    Yokogawa
    all versions
  • Yokogawa Centum Cs 1000 Firmware

    OS
    Yokogawa
    ≤ r3.08.70
  • Yokogawa Centum Cs 3000

    HW
    Yokogawa
    all versions
  • Yokogawa Centum Cs 3000 Entry

    HW
    Yokogawa
    all versions
  • Yokogawa Centum Cs 3000 Entry Firmware

    OS
    Yokogawa
    ≤ r3.09.50
  • Yokogawa Centum Cs 3000 Firmware

    OS
    Yokogawa
    ≤ r3.09.50
  • Yokogawa Centum Vp

    HW
    Yokogawa
    all versions
  • Yokogawa Centum Vp Entry

    HW
    Yokogawa
    all versions
  • Yokogawa Centum Vp Entry Firmware

    OS
    Yokogawa
    ≤ r5.04.20
  • Yokogawa Centum Vp Firmware

    OS
    Yokogawa
    ≤ r5.04.20
  • Yokogawa Exaopc

    APP
    Yokogawa
    ≤ r3.72.00
  • Yokogawa Exapilot

    APP
    Yokogawa
    ≤ r3.96.10
  • Yokogawa Exaplog

    APP
    Yokogawa
    ≤ r3.40.00
  • Yokogawa Exaquantum

    APP
    Yokogawa
    ≤ r2.85.00
  • Yokogawa Exaquantum\/batch

    APP
    Yokogawa
    ≤ r2.50.30
  • Yokogawa Exarqe

    APP
    Yokogawa
    ≤ r4.03.20
  • Yokogawa Exasmoc

    APP
    Yokogawa
    ≤ r4.03.20
  • Yokogawa Fieldmate

    APP
    Yokogawa
    r1.01r1.02
  • Yokogawa Field Wireless Device Opc Server

    OS
    Yokogawa
    ≤ r2.01.02
  • Yokogawa Plant Resource Manager

    APP
    Yokogawa
    ≤ r3.12.00
  • Yokogawa Prosafe Rs

    HW
    Yokogawa
    all versions
  • Yokogawa Prosafe Rs Firmware

    OS
    Yokogawa
    ≤ r3.02.10
  • Yokogawa Scada Software \(fast\/tools\)

    APP
    Yokogawa
    ≤ r10.01
  • Yokogawa Stardom Opc Server

    OS
    Yokogawa
    ≤ r3.40
  • Yokogawa Versatile Data Server Software

    APP
    Yokogawa
    ≤ r7.30.01
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2022-26034CRITICAL9.1PL ✓same product

Obejście uwierzytelnienia w serwerze AD Yokogawa CENTUM VP i B/M9000 VP

CVE-2022-23402CRITICAL9.8PL ✓same product

Yokogawa CENTUM VP — zakodowane na stałe hasło w aplikacjach CAMS

CVE-2022-21194CRITICAL9.8PL ✓same product

Yokogawa CENTUM VP — niezmienione domyślne hasła kont Windows

CVE-2020-5609CRITICAL9.8PL ✓same product

Path traversal w Yokogawa CENTUM CS 3000/VP — zdalne wykonanie kodu

CVE-2020-5608CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia w CAMS for HIS systemów Yokogawa CENTUM