CRITICAL🇵🇱 Wersja polska

CVE-2020-5609

CVSS 9.8v3.1pub. 2020-08-05upd. 2024-11-21

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Yokogawa B\/m9000cs

    HW
    Yokogawa
    all versions

  • Yokogawa B\/m9000cs Firmware

    OS
    Yokogawa
    r5.04.01 – r5.05.01

  • Yokogawa B\/m9000vp

    HW
    Yokogawa
    all versions

  • Yokogawa B\/m9000vp Firmware

    OS
    Yokogawa
    r6.01.01 – r8.03.01

  • Yokogawa Centum Cs 3000

    HW
    Yokogawa
    all versions

  • Yokogawa Centum Cs 3000 Firmware

    OS
    Yokogawa
    r3.08.10 – r3.09.50

  • Yokogawa Centum Vp

    HW
    Yokogawa
    all versions

  • Yokogawa Centum Vp Firmware

    OS
    Yokogawa
    r6.01.00 – r6.07.00r5.01.00 – r5.04.20r4.01.00 – r4.03.00
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path TraversalAuth Bypass
CWE
References

Related vulnerabilities

CVE-2022-26034CRITICAL9.1PL ✓same product

Obejście uwierzytelnienia w serwerze AD Yokogawa CENTUM VP i B/M9000 VP

CVE-2022-21194CRITICAL9.8PL ✓same product

Yokogawa CENTUM VP — niezmienione domyślne hasła kont Windows

CVE-2022-23402CRITICAL9.8PL ✓same product

Yokogawa CENTUM VP — zakodowane na stałe hasło w aplikacjach CAMS

CVE-2020-5608CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia w CAMS for HIS systemów Yokogawa CENTUM

CVE-2015-5626CRITICAL9.8PL ✓same product

Stack-based buffer overflow w systemach przemysłowych Yokogawa — DoS zdalny